CVE-2013-2706 - Cross-site request forgery (CSRF) vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors

Back Back to CVE browser

MEDIUM

Cross-site request forgery (CSRF) vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors

Published Apr 11, 2014

6.8

MEDIUM

CVSS 2.0

EPSS 0.97%

Description

Cross-site request forgery (CSRF) vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (3)

http://osvdb.org/94466
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/52954
third-party-advisoryx_refsource_SECUNIAVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2645
Advisory

Link	Providers	Tags
http://osvdb.org/94466		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/52954		third-party-advisoryx_refsource_SECUNIAVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2645		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner flexera

Published Apr 11, 2014

Updated Aug 6, 2024

Reserved Mar 26, 2013

Link CVE-2013-2706

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-2706

Red Hat

No data

ENISA EUVD

Assigner flexera

Published Apr 11, 2014

Updated Aug 6, 2024

Link EUVD-2013-2645

GitHub

No data