blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2014-3850

MEDIUM 6.8 CVSS 2.0
Published
June 11, 2014
Last modified
June 17, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-352
CVSS vector
AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in the Member Approval plugin 131109 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings to their default and disable registration approval via a request to wp-admin/options-general.php.

Affected products and versions

  • n/a n/a — Versions not specified
  • member_approval_plugin_project member_approval — Version 131109

References

  • seclists.org http://seclists.org/fulldisclosure/2014/Jun/63 Exploit
  • security.dxw.com https://security.dxw.com/advisories/csrf-in-member-approval-131109-permits-unapproved-registrations Exploit
  • nvd.nist.gov Official NVD record