CVE-2013-3252

WP-PostViews < 1.63 - Cross-Site Request Forgery via Options Admin Page

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/93096

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/53127

Product x_refsource_confirm

http://wordpress.org/plugins/wp-postviews/changelog

Scores

EPSS 0.0109

EPSS Percentile 61.6%

Details

CWE

CWE-352

Status published

Products (13)

lesterchan/wp-postviews 1.00

lesterchan/wp-postviews 1.01

lesterchan/wp-postviews 1.02

lesterchan/wp-postviews 1.10

lesterchan/wp-postviews 1.11

lesterchan/wp-postviews 1.20

lesterchan/wp-postviews 1.30

lesterchan/wp-postviews 1.31

lesterchan/wp-postviews 1.40

lesterchan/wp-postviews 1.50

... and 3 more

Published Apr 10, 2014

Tracked Since Feb 18, 2026