CVE-2013-3252

Published: Apr 10, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.

Affected (13)

Products: Lesterchan: Wp Postviews

Lesterchan

1 product

Wp Postviews

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Lesterchan Wp Postviews	Up to 1.62
Lesterchan Wp Postviews	Version 1.00
Lesterchan Wp Postviews	Version 1.01
Lesterchan Wp Postviews	Version 1.02
Lesterchan Wp Postviews	Version 1.10
Lesterchan Wp Postviews	Version 1.11
Lesterchan Wp Postviews	Version 1.20
Lesterchan Wp Postviews	Version 1.30
Lesterchan Wp Postviews	Version 1.31
Lesterchan Wp Postviews	Version 1.40
Lesterchan Wp Postviews	Version 1.50
Lesterchan Wp Postviews	Version 1.60
Lesterchan Wp Postviews	Version 1.61