CVE-2013-2107

WordPress Plugin Mail On Update - Cross-Site Request Forgery

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2013-2107 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.

Description

Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the "List of alternative recipients" via the mailonupdate_mailto parameter in the mail-on-update page to wp-admin/options-general.php. NOTE: a third party claims that 5.2.1 and 5.2.2 are also vulnerable, but the issue might require a separate CVE identifier since this might reflect an incomplete fix.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin Mail On Update - Cross-Site Request ForgeryExploitDB exploitby Henri SaloNot analyzed1 file
ExploitDB
PoC details

References

5