CSRF in Angrybte Wordpress Exit Box Lite
CVE-2013-10029
A vulnerability classified as problematic was found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this vulnerability is the function exitboxadmin of the file wordpress-exit-box-lite.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. Upgrading to version 1.10 is able to address this issue. The patch is named fad26701addb862c51baf85c6e3cc136aa79c309. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230671.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Angrybte Wordpress_exit_box_lite
- N/a Exit Box Lite Plugin — versions 1.06
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cna@vuldb.com (Permissions Required, technical-description, Third Party Advisory, vdb-entry)
- cna@vuldb.com (signature, Permissions Required, permissions-required, Third Party Advisory)
- cna@vuldb.com (Patch, patch)
Frequently asked questions
- What is CVE-2013-10029?
- CVE-2013-10029 is a medium-severity vulnerability in Angrybte Wordpress Exit Box Lite, classified under Cross-Site Request Forgery (CSRF). CVSS score: 4.3/10. Published 2023-06-05.
- How severe is CVE-2013-10029?
- Medium severity. CVSS v3 base score is 4.3 out of 10.
- Is CVE-2013-10029 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.