CSRF in Zemanta Related Posts
CVE-2013-3257
Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.011 (61.4th percentile) — read the EPSS interpretation.
Affected products
- Zemanta Related_posts — versions 1.0, 1.1, 1.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Patch)
- PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2013-3257?
- CVE-2013-3257 is a vulnerability in Zemanta Related Posts, classified under Cross-Site Request Forgery (CSRF). Published 2014-06-02.
- Is CVE-2013-3257 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.