CVE-2014-3843

Published: May 22, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected (5)

Products: Zemanta: Search Everything

Zemanta

1 product

Search Everything

Configuration A

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Zemanta Search Everything	Up to 8.1
Zemanta Search Everything	Version 7.0.2
Zemanta Search Everything	Version 7.0.3
Zemanta Search Everything	Version 7.0.4
Zemanta Search Everything	Version 8.0

Running on/with	Platform Versions
Wordpress Wordpress	All versions

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (4)

http://secunia.com/advisories/58502

Source: cve@mitre.org

http://wordpress.org/plugins/search-everything/changelog

Source: cve@mitre.org

http://secunia.com/advisories/58502

Source: af854a3a-2127-422b-91ae-364da2661108

http://wordpress.org/plugins/search-everything/changelog

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.