What is CVE-2013-3250?

CVE-2013-3250 is a vulnerability in Wordpress Wp Maintenance Mode Plugin, classified under Cross-Site Request Forgery (CSRF). Published 2013-06-21.

Is CVE-2013-3250 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Wordpress Wp Maintenance Mode Plugin

CVE-2013-3250

Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.010 (57.7th percentile) — read the EPSS interpretation.

Affected products

Wordpress Wp_maintenance_mode_plugin — versions 1.8.0, 1.8.1, 1.8.2
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

20142995/nuclei-templates

References

PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2013-3250?: CVE-2013-3250 is a vulnerability in Wordpress Wp Maintenance Mode Plugin, classified under Cross-Site Request Forgery (CSRF). Published 2013-06-21.
Is CVE-2013-3250 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.