CVEvulnerability

CVE-2013-3477

6.8 MEDIUM Published 2014-05-27 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2014-05-27
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors.

Affected configurations

• zemanta related posts (<= 1.3.1) • zemanta related posts 1.0 • zemanta related posts 1.1 • zemanta related posts 1.2 • zemanta related posts 1.3

Weakness · CWE (1)

CWE-352 Cross-Site Request Forgery weakness

References

http://secunia.com/advisories/53321 secunia.com
http://wordpress.org/plugins/related-posts-by-zemanta/changelog/ wordpress.org
http://www.securityfocus.com/bid/59840 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/84246 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/53321 secunia.com
http://wordpress.org/plugins/related-posts-by-zemanta/changelog/ wordpress.org
http://www.securityfocus.com/bid/59840 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/84246 exchange.xforce.ibmcloud.com