CVE-2013-2705: CSRF
Published May 13, 2014
·Updated
Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings.
Affected Software
25 affected components
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress<=3.5
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=1.2
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=1.2.2
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=1.3
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=1.4
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=1.5
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=1.6
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=1.7
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=1.8
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=1.9
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=2.0
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=2.1
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=2.2
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=2.3
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=2.4
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=2.5
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=2.6
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=2.8
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=3.2.7
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=3.2.8
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=3.2.9
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=3.3.0
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=3.3.1
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=3.3.2
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart Wordpress=3.4
Event History
May 13, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-2705?
CVE-2013-2705 is classified as a high severity cross-site request forgery vulnerability.
2
How do I fix CVE-2013-2705?
To fix CVE-2013-2705, upgrade the WordPress Simple Paypal Shopping Cart plugin to version 3.6 or later.
3
What type of vulnerability is CVE-2013-2705?
CVE-2013-2705 is a cross-site request forgery (CSRF) vulnerability.
4
Who is affected by CVE-2013-2705?
Administrators of WordPress sites using affected versions of the Simple Paypal Shopping Cart plugin are at risk from CVE-2013-2705.
5
When was CVE-2013-2705 disclosed?
CVE-2013-2705 was disclosed in July 2013.