blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2013-1409

MEDIUM 4.3 CVSS 2.0
Published
March 3, 2014
Last modified
June 16, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-79
CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _ajax_nonce parameter to wp-admin/admin-ajax.php.

Affected WordPress components

  • commentluv Plugin · commentluv
    Confirmed match Homeless
    Versions not specified; Version 2.90.9.9; Up to and including 2.92.3; Version 2.7; Version 2.71; Version 2.74; Version 2.76; Version 2.81.6; Version 2.80; Version 2.81; Version 2.81.1; Version 2.81.2; Version 2.81.7; Version 2.81.3; Version 2.81.4; Version 2.81.5; Version 2.91; Version 2.81.8; Version 2.90.1; Version 2.90.3; Version 2.90.5; Version 2.90.6; Version 2.7691; Version 2.90.7; Version 2.90.8; Version 2.90.8.1; Version 2.90.8.2; Version 2.90.8.3; Version 2.90.9; Version 2.90.9.1; Version 2.90.9.2; Version 2.90.9.3; Version 2.90.9.4; Version 2.90.9.5; Version 2.90.9.6; Version 2.90.9.7; Version 2.90.9.8; Version 2.90.9.9.1; Version 2.90.9.9.2; Version 2.90.9.9.3; Version 2.91.1; Version 2.92; Version 2.92.1; Version 2.92.2; Version 2.761; Version 2.762; Version 2.763; Version 2.764; Version 2.765; Version 2.766; Version 2.767; Version 2.768; Version 2.769
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • n/a n/a — Versions not specified
  • commentluv commentluv — Up to and including 2.92.3
  • commentluv commentluv — Version 2.7
  • commentluv commentluv — Version 2.71
  • commentluv commentluv — Version 2.74
  • commentluv commentluv — Version 2.76
  • commentluv commentluv — Version 2.80
  • commentluv commentluv — Version 2.81
  • commentluv commentluv — Version 2.81.1
  • commentluv commentluv — Version 2.81.2
  • commentluv commentluv — Version 2.81.3
  • commentluv commentluv — Version 2.81.4
  • commentluv commentluv — Version 2.81.5
  • commentluv commentluv — Version 2.81.6
  • commentluv commentluv — Version 2.81.7
  • commentluv commentluv — Version 2.81.8
  • commentluv commentluv — Version 2.90.1
  • commentluv commentluv — Version 2.90.3
  • commentluv commentluv — Version 2.90.5
  • commentluv commentluv — Version 2.90.6
  • commentluv commentluv — Version 2.90.7
  • commentluv commentluv — Version 2.90.8
  • commentluv commentluv — Version 2.90.8.1
  • commentluv commentluv — Version 2.90.8.2
  • commentluv commentluv — Version 2.90.8.3
  • commentluv commentluv — Version 2.90.9
  • commentluv commentluv — Version 2.90.9.1
  • commentluv commentluv — Version 2.90.9.2
  • commentluv commentluv — Version 2.90.9.3
  • commentluv commentluv — Version 2.90.9.4
  • commentluv commentluv — Version 2.90.9.5
  • commentluv commentluv — Version 2.90.9.6
  • commentluv commentluv — Version 2.90.9.7
  • commentluv commentluv — Version 2.90.9.8
  • commentluv commentluv — Version 2.90.9.9
  • commentluv commentluv — Version 2.90.9.9.1
  • commentluv commentluv — Version 2.90.9.9.2
  • commentluv commentluv — Version 2.90.9.9.3
  • commentluv commentluv — Version 2.91
  • commentluv commentluv — Version 2.91.1
  • commentluv commentluv — Version 2.92
  • commentluv commentluv — Version 2.92.1
  • commentluv commentluv — Version 2.92.2
  • commentluv commentluv — Version 2.761
  • commentluv commentluv — Version 2.762
  • commentluv commentluv — Version 2.763
  • commentluv commentluv — Version 2.764
  • commentluv commentluv — Version 2.765
  • commentluv commentluv — Version 2.766
  • commentluv commentluv — Version 2.767
  • commentluv commentluv — Version 2.768
  • commentluv commentluv — Version 2.769
  • commentluv commentluv — Version 2.7691

References