CVE-2012-6629: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change an email address or (2) conduct script insertion attacks. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6629?
CVE-2012-6629 has a high severity rating due to its potential for exploitation through CSRF attacks.
How do I fix CVE-2012-6629?
To fix CVE-2012-6629, update the Newsletter Manager plugin to the latest version that addresses the CSRF vulnerabilities.
What types of attacks are possible with CVE-2012-6629?
CVE-2012-6629 allows attackers to hijack administrator authentication and potentially change email addresses or conduct script insertion attacks.
Which versions of the Newsletter Manager plugin are affected by CVE-2012-6629?
CVE-2012-6629 affects version 1.0.2 and earlier of the Newsletter Manager plugin.
Who is vulnerable to CVE-2012-6629?
Administrators using affected versions of the Newsletter Manager plugin on WordPress sites are vulnerable to CVE-2012-6629.