6.8
CVE-2013-2707
- EPSS 0.97%
- Veröffentlicht 10.05.2013 11:42:30
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Erkennungen
LoginLogin With Ajax < 3.1 - Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.
Mögliche Gegenmaßnahme
Login With Ajax – Fast Logins, 2FA, Redirects: Update to version 3.1, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netweblogic ≫ Login With Ajax Version 2.1
Netweblogic ≫ Login With Ajax Version 2.1.1
Netweblogic ≫ Login With Ajax Version 2.1.2
Netweblogic ≫ Login With Ajax Version 2.1.3
Netweblogic ≫ Login With Ajax Version 2.1.4
Netweblogic ≫ Login With Ajax Version 2.1.5
Netweblogic ≫ Login With Ajax Version 2.2
Netweblogic ≫ Login With Ajax Version 2.21
Netweblogic ≫ Login With Ajax Version 3.0
Netweblogic ≫ Login With Ajax Version 3.0.1
Netweblogic ≫ Login With Ajax Version 3.0.2
Netweblogic ≫ Login With Ajax Version 3.0.3
Netweblogic ≫ Login With Ajax Version 3.0.4
Netweblogic ≫ Login With Ajax Version 3.0.4.1
Netweblogic ≫ Login With Ajax Version 3.0b
Netweblogic ≫ Login With Ajax Version 3.0b3
Netweblogic ≫ Login With Ajax Version 3.1
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
Login With Ajax – Fast Logins, 2FA, Redirects
Version
[*, 3.1)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.97% | 0.573 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-352 Cross-Site Request Forgery (CSRF)
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
http://wordpress.org/extend/plugins/login-with-ajax/changelog/
http://secunia.com/advisories/52950
https://www.wordfence.com/threat-intel/vulnerabilities/id/5dec045a-b87c-4db5-960e-8888e410a950