CVE-2013-2707
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD
Description
Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.
Affected (17)
Products: Netweblogic: Login With Ajax
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.1.1 |
| Running on/with | Platform Versions |
|---|---|
Netweblogic Login With Ajax | Version 3.1.1 |
Wordpress Wordpress | All versions |
References (4)
Source: PSIRT-CNA@flexerasoftware.com
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Timeline
No history available yet.