CVE-2013-2707

Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:netweblogic:login_with_ajax:2.2:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.0:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.0b:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:2.21:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.0b3:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:2.1:*:*:*:*:*:*:*
cpe:2.3:a:netweblogic:login_with_ajax:3.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*

Information

Published : 2013-05-10 04:42

Updated : 2013-05-10 04:42


NVD link : CVE-2013-2707

Mitre link : CVE-2013-2707


JSON object : View

CWE
CWE-352

Cross-Site Request Forgery (CSRF)

Advertisement

dedicated server usa

Products Affected

wordpress

  • wordpress

netweblogic

  • login_with_ajax