CVE-2013-2703: CSRF
First published: Sun May 05 2013(Updated: )
Cross-site request forgery (CSRF) vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.
Credit: PSIRT-CNA@flexerasoftware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Crunchify Facebook Members | <=5.0.4 | |
| Crunchify Facebook Members | =4.5.3 | |
| Crunchify Facebook Members | =4.6 | |
| Crunchify Facebook Members | =4.6.1 | |
| Crunchify Facebook Members | =4.7 | |
| Crunchify Facebook Members | =5.0 | |
| Crunchify Facebook Members | =5.0.1 | |
| Crunchify Facebook Members | =5.0.2 | |
| Crunchify Facebook Members | =5.0.3 | |
| WordPress WordPress |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/severity
- agent/weakness
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/crunchify
- canonical/crunchify facebook members
- version/crunchify facebook members/5.0.4
- version/crunchify facebook members/4.5.3
- version/crunchify facebook members/4.6
- version/crunchify facebook members/4.6.1
- version/crunchify facebook members/4.7
- version/crunchify facebook members/5.0
- version/crunchify facebook members/5.0.1
- version/crunchify facebook members/5.0.2
- version/crunchify facebook members/5.0.3
- vendor/wordpress
- canonical/wordpress wordpress