CVE-2013-6797

Published: Nov 19, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in bluewrench-video-widget.php in the Blue Wrench Video Widget plugin before 2.0.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that embed arbitrary URLs via the bw_url parameter in the bw-videos page to wp-admin/admin.php, as demonstrated by embedding a URL to a JavaScript file.

Affected (6)

Products: Sunil Nanda: Blue Wrench Video Widget

Sunil Nanda

1 product

Blue Wrench Video Widget

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Sunil Nanda Blue Wrench Video Widget	Up to 1.0.5
Sunil Nanda Blue Wrench Video Widget	Version 1.0.0
Sunil Nanda Blue Wrench Video Widget	Version 1.0.1
Sunil Nanda Blue Wrench Video Widget	Version 1.0.2
Sunil Nanda Blue Wrench Video Widget	Version 1.0.3
Sunil Nanda Blue Wrench Video Widget	Version 1.0.4