WordPress CVEs

Description

Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors.

Affected WordPress components

• related-posts-by-zemanta Plugin · related-posts-by-zemanta
  Confirmed match Homeless
  Versions not specified
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• zemanta related_posts — Up to and including 1.3.1
• zemanta related_posts — Version 1.0
• zemanta related_posts — Version 1.1
• zemanta related_posts — Version 1.2
• zemanta related_posts — Version 1.3

References

• secunia.com http://secunia.com/advisories/53321
• wordpress.org http://wordpress.org/plugins/related-posts-by-zemanta/changelog/
• www.securityfocus.com http://www.securityfocus.com/bid/59840
• exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/84246
• nvd.nist.gov Official NVD record