CVE-2013-3491

MEDIUM 6.8 CVSS 2.0

Published: July 16, 2013
Last modified: June 16, 2026
NVD status: Modified
Reported by: PSIRT-CNA@flexerasoftware.com
Weakness: CWE-352
CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) modify buttons, or (3) insert cross-site scripting (XSS) sequences.

Affected products and versions

n/a n/a — Versions not specified

References

secunia.com http://secunia.com/advisories/52948 Vendor Advisory
www.securityfocus.com http://www.securityfocus.com/bid/60956
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/85438
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References