Description
Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.
References (2)
Core 2
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/52950
Patch x_refsource_misc
http://wordpress.org/extend/plugins/login-with-ajax/changelog/
Scores
EPSS
0.0097
EPSS Percentile
57.7%
Details
CWE
CWE-352
Status
published
Products (17)
netweblogic/login_with_ajax
2.1
netweblogic/login_with_ajax
2.1.1
netweblogic/login_with_ajax
2.1.2
netweblogic/login_with_ajax
2.1.3
netweblogic/login_with_ajax
2.1.4
netweblogic/login_with_ajax
2.1.5
netweblogic/login_with_ajax
2.2
netweblogic/login_with_ajax
2.21
netweblogic/login_with_ajax
3.0
netweblogic/login_with_ajax
3.0.1
... and 7 more
Published
May 10, 2013
Tracked Since
Feb 18, 2026