CVE-2013-3253

Xhanch My Twitter < 2.7.7 - Cross-Site Request Forgery in Admin Settings

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings.

References (4)

Core 4
Core References
Various Sources x_refsource_confirm
http://forum.xhanch.com/index.php/topic%2C3806.0.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/53133
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/61629

Scores

EPSS 0.0120
EPSS Percentile 64.5%

Details

CWE
CWE-352
Status published
Products (19)
xhanch/my_twitter 2.5.8
xhanch/my_twitter 2.5.9
xhanch/my_twitter 2.6.0
xhanch/my_twitter 2.6.1
xhanch/my_twitter 2.6.2
xhanch/my_twitter 2.6.3
xhanch/my_twitter 2.6.4
xhanch/my_twitter 2.6.5
xhanch/my_twitter 2.6.6
xhanch/my_twitter 2.6.7
... and 9 more
Published Aug 09, 2013
Tracked Since Feb 18, 2026