CVE-2013-2108

MEDIUM

Undolog Cleanfix - CSRF

Title source: rule

Description

WordPress WP Cleanfix Plugin 2.4.4 has CSRF

Exploits (1)

exploitdb WORKING POC VERIFIED

by Enigma Ideas · htmlwebappsphp

https://www.exploit-db.com/exploits/38520

View Code ZIP pw:eip

References (4)

[Exploit, Mailing List, Third Party Advisory] http://www.openwall.com/lists/oss-security/2013/05/18/11

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/59940

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/84435

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/84562

Scores

CVSS v3 5.4

EPSS 0.0023

EPSS Percentile 46.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Details

CWE

CWE-352

Status published

Products (1)

undolog/cleanfix 2.4.4

Published Feb 10, 2020

Tracked Since Feb 18, 2026