6.8

CVE-2013-2710

Contextual Related Posts <= 1.8.6 - Cross-Site Request Forgery to Cross-Site Scripting

Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via unspecified vectors.
Mögliche Gegenmaßnahme
Contextual Related Posts: Update to version 1.8.7, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ajaydsouza ≫ Contextual Related Posts SwPlatform wordpress Version <= 1.8.6
Ajaydsouza ≫ Contextual Related Posts Version 1.0 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.1 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.1.1 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.2 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.2.1 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.2.2 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.3 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.3.1 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.4 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.4.1 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.4.2 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.5 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.5.1 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.5.2 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.6 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.6.1 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.6.2 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.6.3 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.6.4 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.6.5 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.7 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.7.1 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.7.2 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.7.3 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.8 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.8.1 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.8.2 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.8.3 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.8.4 SwPlatform wordpress
Ajaydsouza ≫ Contextual Related Posts Version 1.8.5 SwPlatform wordpress
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Contextual Related Posts
Version *-1.8.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.05% 0.599
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://secunia.com/advisories/52960
http://wordpress.org/plugins/contextual-related-posts/changelog/
Patch
http://www.securityfocus.com/bid/59733
https://exchange.xforce.ibmcloud.com/vulnerabilities/84100
https://www.wordfence.com/threat-intel/vulnerabilities/id/81a7afc0-05be-4966-b762-081ef553d4e8
Third Party Advisory