CVE-2013-3256

MEDIUM 6.8 CVSS 2.0

Published: August 8, 2013
Last modified: June 16, 2026
NVD status: Modified
Reported by: PSIRT-CNA@flexerasoftware.com
Weakness: CWE-352
CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in the Shareaholic SexyBookmarks plugin 6.1.4.0 for WordPress allows remote attackers to hijack the authentication of users for requests that "manipulate plugin settings."

Affected WordPress components

sexybookmarks Plugin · sexybookmarks

Confirmed match Homeless

Versions not specified
View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

n/a n/a — Versions not specified

References

secunia.com http://secunia.com/advisories/53138 Vendor Advisory
wordpress.org http://wordpress.org/plugins/sexybookmarks/changelog/
www.securityfocus.com http://www.securityfocus.com/bid/61561
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/86126
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected WordPress components

Affected products and versions

References