CVE-2013-2700

Published: May 14, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that add or edit an ad via unspecified vectors.

Affected (17)

Products: Webmaster Source: Wp125

Webmaster Source

1 product

Wp125

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Webmaster Source Wp125	Up to 1.4.9
Webmaster Source Wp125	Version 1.0.0
Webmaster Source Wp125	Version 1.1.0
Webmaster Source Wp125	Version 1.2.0
Webmaster Source Wp125	Version 1.3.0
Webmaster Source Wp125	Version 1.3.7
Webmaster Source Wp125	Version 1.3.8
Webmaster Source Wp125	Version 1.3.9
Webmaster Source Wp125	Version 1.4.0
Webmaster Source Wp125	Version 1.4.1
Webmaster Source Wp125	Version 1.4.2
Webmaster Source Wp125	Version 1.4.3
Webmaster Source Wp125	Version 1.4.4
Webmaster Source Wp125	Version 1.4.5
Webmaster Source Wp125	Version 1.4.6
Webmaster Source Wp125	Version 1.4.7
Webmaster Source Wp125	Version 1.4.8