What is CVE-2014-3850?

CVE-2014-3850 is a vulnerability in Member Approval Plugin Project, classified under Cross-Site Request Forgery (CSRF). Published 2014-06-11.

Is CVE-2014-3850 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Member Approval Plugin Project

CVE-2014-3850

Cross-site request forgery (CSRF) vulnerability in the Member Approval plugin 131109 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings to their default and disable registration approval via a request to wp-admin/options-general.php.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.010 (60.0th percentile) — read the EPSS interpretation.

Affected products

Member_approval_plugin_project Member_approval — versions 131109
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-3850?: CVE-2014-3850 is a vulnerability in Member Approval Plugin Project, classified under Cross-Site Request Forgery (CSRF). Published 2014-06-11.
Is CVE-2014-3850 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.