CVE-2013-2710
MEDIUM
6.8
CVSS 2.0
Description
Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via unspecified vectors.
Affected WordPress components
-
Contextual Related Posts Plugin · contextual-related-postsVersions not specifiedView on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- ajaydsouza contextual_related_posts — Up to and including 1.8.6
- ajaydsouza contextual_related_posts — Version 1.0
- ajaydsouza contextual_related_posts — Version 1.1
- ajaydsouza contextual_related_posts — Version 1.1.1
- ajaydsouza contextual_related_posts — Version 1.2
- ajaydsouza contextual_related_posts — Version 1.2.1
- ajaydsouza contextual_related_posts — Version 1.2.2
- ajaydsouza contextual_related_posts — Version 1.3
- ajaydsouza contextual_related_posts — Version 1.3.1
- ajaydsouza contextual_related_posts — Version 1.4
- ajaydsouza contextual_related_posts — Version 1.4.1
- ajaydsouza contextual_related_posts — Version 1.4.2
- ajaydsouza contextual_related_posts — Version 1.5
- ajaydsouza contextual_related_posts — Version 1.5.1
- ajaydsouza contextual_related_posts — Version 1.5.2
- ajaydsouza contextual_related_posts — Version 1.6
- ajaydsouza contextual_related_posts — Version 1.6.1
- ajaydsouza contextual_related_posts — Version 1.6.2
- ajaydsouza contextual_related_posts — Version 1.6.3
- ajaydsouza contextual_related_posts — Version 1.6.4
- ajaydsouza contextual_related_posts — Version 1.6.5
- ajaydsouza contextual_related_posts — Version 1.7
- ajaydsouza contextual_related_posts — Version 1.7.1
- ajaydsouza contextual_related_posts — Version 1.7.2
- ajaydsouza contextual_related_posts — Version 1.7.3
- ajaydsouza contextual_related_posts — Version 1.8
- ajaydsouza contextual_related_posts — Version 1.8.1
- ajaydsouza contextual_related_posts — Version 1.8.2
- ajaydsouza contextual_related_posts — Version 1.8.3
- ajaydsouza contextual_related_posts — Version 1.8.4
- ajaydsouza contextual_related_posts — Version 1.8.5
References
- secunia.com http://secunia.com/advisories/52960
- wordpress.org http://wordpress.org/plugins/contextual-related-posts/changelog/ Patch
- www.securityfocus.com http://www.securityfocus.com/bid/59733
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/84100
- nvd.nist.gov Official NVD record