CVE-2013-3251

qTranslate < 2.5.34 - Cross-Site Request Forgery via Plugin Settings

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in the qTranslate plugin 2.5.34 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.

References (2)

Core 2

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/53126

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/93873

Scores

EPSS 0.0098

EPSS Percentile 58.0%

Details

CWE

CWE-352

Status published

Products (1)

qianqin/qtranslate < 2.5.34

Published Apr 10, 2014

Tracked Since Feb 18, 2026