CVE-2013-3476: CSRF
Published Jun 2, 2014
·Updated
Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors.
Affected Software
17 affected components
Zemanta Related Posts Wordpress<=2.6
Zemanta Related Posts Wordpress=1.0
Zemanta Related Posts Wordpress=1.1
Zemanta Related Posts Wordpress=1.2
Zemanta Related Posts Wordpress=1.3
Zemanta Related Posts Wordpress=1.3.1
Zemanta Related Posts Wordpress=1.3.2
Zemanta Related Posts Wordpress=1.3.3
Zemanta Related Posts Wordpress=1.4
Zemanta Related Posts Wordpress=1.5
Zemanta Related Posts Wordpress=1.6
Zemanta Related Posts Wordpress=1.7
Zemanta Related Posts Wordpress=1.8
Zemanta Related Posts Wordpress=1.8.1
Zemanta Related Posts Wordpress=2.3
Zemanta Related Posts Wordpress=2.4.1
Zemanta Related Posts Wordpress=2.5.1
Remediation
Event History
Jun 2, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-3476?
The severity of CVE-2013-3476 is medium, with a score of 6.8.
2
How do I fix CVE-2013-3476?
To fix CVE-2013-3476, update the WordPress Related Posts plugin to version 2.6.2 or later.
3
What type of vulnerability is CVE-2013-3476?
CVE-2013-3476 is a cross-site request forgery (CSRF) vulnerability.
4
What can attackers do with CVE-2013-3476?
Attackers can hijack user authentication for requests that change settings due to CVE-2013-3476.
5
Is there a patch available for CVE-2013-3476?
Yes, a patch is available for CVE-2013-3476.