CVE-2013-2710

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-2710
Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via unspecified vectors.

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/52960
http://wordpress.org/plugins/contextual-related-posts/changelog/ Patch
http://www.securityfocus.com/bid/59733
https://exchange.xforce.ibmcloud.com/vulnerabilities/84100
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ajaydsouza:contextual_related_posts:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.0:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.1.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.2.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.2.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.3.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.4:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.4.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.4.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.5:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.5.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.5.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.6:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.6.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.6.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.6.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.6.4:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.6.5:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.7:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.7.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.7.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.7.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.8:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.8.1:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.8.2:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.8.3:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.8.4:*:*:*:*:wordpress:*:*
cpe:2.3:a:ajaydsouza:contextual_related_posts:1.8.5:*:*:*:*:wordpress:*:*
History

No history.

Information

Published : 2014-06-02 15:55

Updated : 2017-08-29 01:33

NVD link : CVE-2013-2710

Mitre link : CVE-2013-2710

CVE.ORG link : CVE-2013-2710

JSON object : View

Products Affected

ajaydsouza

  • contextual_related_posts
CWE
CWE-352

Cross-Site Request Forgery (CSRF)