What is CVE-2013-2700?

CVE-2013-2700 is a vulnerability in Webmaster-Source Wp125, classified under Cross-Site Request Forgery (CSRF). Published 2014-05-14.

Is CVE-2013-2700 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Webmaster-Source Wp125

CVE-2013-2700

Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that add or edit an ad via unspecified vectors.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.012 (64.7th percentile) — read the EPSS interpretation.

Affected products

Webmaster-source Wp125 — versions 1.0.0, 1.1.0, 1.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

20142995/nuclei-templates

References

PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Exploit, Patch)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2013-2700?: CVE-2013-2700 is a vulnerability in Webmaster-Source Wp125, classified under Cross-Site Request Forgery (CSRF). Published 2014-05-14.
Is CVE-2013-2700 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.