CVE-2013-2703
crunchify facebook_members < 5.0.4 - Cross-Site Request Forgery
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.
References (2)
Core 2
Core References
Product x_refsource_confirm
http://wordpress.org/extend/plugins/facebook-members/changelog/
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/52962
Scores
EPSS
0.0097
EPSS Percentile
57.7%
Details
CWE
CWE-352
Status
published
Products (9)
crunchify/facebook_members
4.5.3
crunchify/facebook_members
4.6
crunchify/facebook_members
4.6.1
crunchify/facebook_members
4.7
crunchify/facebook_members
5.0
crunchify/facebook_members
5.0.1
crunchify/facebook_members
5.0.2
crunchify/facebook_members
5.0.3
crunchify/facebook_members
< 5.0.4
Published
May 05, 2013
Tracked Since
Feb 18, 2026