CVEvulnerability
CVE-2013-2696
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-04-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Affected configurations
• crunchify all-in-on-webmaster (<= 8.2.3)
• crunchify all-in-on-webmaster 7.7.7
• crunchify all-in-on-webmaster 8.0.0
• crunchify all-in-on-webmaster 8.1
• crunchify all-in-on-webmaster 8.2
• crunchify all-in-on-webmaster 8.2.1
• crunchify all-in-on-webmaster 8.2.2
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/52877 Vendor Advisory
- http://wordpress.org/extend/plugins/all-in-one-webmaster/changelog/ wordpress.org
- http://secunia.com/advisories/52877 Vendor Advisory
- http://wordpress.org/extend/plugins/all-in-one-webmaster/changelog/ wordpress.org