CVE-2014-3843: CSRF
Published May 22, 2014
·Updated
Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
12 affected components
Zemanta Search Everything Wordpress<=8.1
Zemanta Search Everything Wordpress=7.0.2
Zemanta Search Everything Wordpress=7.0.3
Zemanta Search Everything Wordpress=7.0.4
Zemanta Search Everything Wordpress=8.0
WordPress WordPress
All of the following
Any of the following
Zemanta Search Everything Wordpress<=8.1
Zemanta Search Everything Wordpress=7.0.2
Zemanta Search Everything Wordpress=7.0.3
Zemanta Search Everything Wordpress=7.0.4
Zemanta Search Everything Wordpress=8.0
WordPress WordPress
Event History
May 22, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:13 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3843?
CVE-2014-3843 is a medium-severity cross-site request forgery (CSRF) vulnerability.
2
How do I fix CVE-2014-3843?
To fix CVE-2014-3843, update the Search Everything plugin to version 8.1.1 or later.
3
What could happen if CVE-2014-3843 is exploited?
Exploitation of CVE-2014-3843 could allow remote attackers to hijack the authentication of WordPress users.
4
What versions of Search Everything are affected by CVE-2014-3843?
CVE-2014-3843 affects Search Everything plugin versions prior to 8.1.1, including 7.0.2, 7.0.3, 7.0.4, and 8.0.
5
What platforms are impacted by CVE-2014-3843?
CVE-2014-3843 impacts the Search Everything plugin used on WordPress installations.