CVE-2013-2701 - Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors

Back Back to CVE browser

MEDIUM

Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors

Published Nov 1, 2013

6.8

MEDIUM

CVSS 2.0

EPSS 0.97%

Description

Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings via unknown vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (3)

http://secunia.com/advisories/52951
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/63198
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2640
Advisory

Link	Providers	Tags
http://secunia.com/advisories/52951		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/63198		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2640		Advisory