CVE-2013-2705

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-2705
Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://osvdb.org/93953
http://secunia.com/advisories/52963 Vendor Advisory
http://www.tipsandtricks-hq.com/ecommerce/wordpress-shopping-cart-change-log-319
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:1.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:1.2.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:1.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:1.4:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:1.5:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:1.6:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:1.7:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:1.8:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:1.9:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:2.0:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:2.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:2.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:2.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:2.4:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:2.5:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:2.6:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:2.8:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:3.2.7:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:3.2.8:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:3.2.9:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:3.3.0:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:3.3.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:3.3.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:tipsandtricks-hq:wordpress_simple_paypal_shopping_cart:3.4:*:*:*:*:wordpress:*:*
History

No history.

Information

Published : 2014-05-13 14:55

Updated : 2014-05-14 15:35

NVD link : CVE-2013-2705

Mitre link : CVE-2013-2705

CVE.ORG link : CVE-2013-2705

JSON object : View

Products Affected

tipsandtricks-hq

  • wordpress_simple_paypal_shopping_cart
CWE
CWE-352

Cross-Site Request Forgery (CSRF)