CVE-2013-3257: CSRF
Published Jun 2, 2014
·Updated
Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors.
Affected Software
19 affected components
Zemanta Related Posts Wordpress<=2.7.1
Zemanta Related Posts Wordpress=1.0
Zemanta Related Posts Wordpress=1.1
Zemanta Related Posts Wordpress=1.2
Zemanta Related Posts Wordpress=1.3
Zemanta Related Posts Wordpress=1.3.1
Zemanta Related Posts Wordpress=1.3.2
Zemanta Related Posts Wordpress=1.3.3
Zemanta Related Posts Wordpress=1.4
Zemanta Related Posts Wordpress=1.5
Zemanta Related Posts Wordpress=1.6
Zemanta Related Posts Wordpress=1.7
Zemanta Related Posts Wordpress=1.8
Zemanta Related Posts Wordpress=1.8.1
Zemanta Related Posts Wordpress=2.3
Zemanta Related Posts Wordpress=2.4.1
Zemanta Related Posts Wordpress=2.5.1
Zemanta Related Posts Wordpress=2.6
Zemanta Related Posts Wordpress=2.7
Remediation
Patch Available
Event History
Jun 2, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-3257?
The severity of CVE-2013-3257 is rated medium with a score of 6.8.
2
How do I fix CVE-2013-3257?
To fix CVE-2013-3257, update the Related Posts plugin to version 2.7.2 or later.
3
What type of vulnerability is CVE-2013-3257?
CVE-2013-3257 is a cross-site request forgery (CSRF) vulnerability.
4
Which software is affected by CVE-2013-3257?
CVE-2013-3257 affects the Zemanta Related Posts plugin for WordPress.
5
What does CVE-2013-3257 allow attackers to do?
CVE-2013-3257 allows remote attackers to hijack the authentication of users for requests that modify settings.