CVE-2013-2696

Published: Apr 25, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Affected (7)

Products: Crunchify: All In On Webmaster

Crunchify

1 product

All In On Webmaster

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Crunchify All In On Webmaster	Up to 8.2.3
Crunchify All In On Webmaster	Version 7.7.7
Crunchify All In On Webmaster	Version 8.0.0
Crunchify All In On Webmaster	Version 8.1
Crunchify All In On Webmaster	Version 8.2.1
Crunchify All In On Webmaster	Version 8.2.2
Crunchify All In On Webmaster	Version 8.2