CSRF in Qianqin Qtranslate
CVE-2013-3251
Cross-site request forgery (CSRF) vulnerability in the qTranslate plugin 2.5.34 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.
Affected products
- Qianqin Qtranslate
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry)
Frequently asked questions
- What is CVE-2013-3251?
- CVE-2013-3251 is a vulnerability in Qianqin Qtranslate, classified under Cross-Site Request Forgery (CSRF). Published 2014-04-10.
- Is CVE-2013-3251 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.