EUVD-2013-2645

Malware in sbrugna...

Stream Video Player <= 1.4.0 - Setting Manipulation CSRF

The Stream Video Player WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

CVE-2013-2706

Cross-site request forgery CSRF vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

CVE-2013-2706

The CVE refers to a CSRF vulnerability in the Stream Video Player plugin for WordPress, version 1.4.0 and earlier. The underlying issue allows an attacker to hijack an administrator’s authenticated session to submit requests that alter plugin settings via unspecified vectors. Documented impact is...

WordPress Stream Video Player Plugin <= 1.4.0 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. Solution Update the plugin...