CVE-2015-6523

Portfolio < 1.05 - Cross-Site Request Forgery via Instagram-Portfolio Admin Page

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php.

References (3)

Core 3

Core References

Third Party Advisory x_refsource_misc

https://wpvulndb.com/vulnerabilities/8108

Product x_refsource_confirm

https://plugins.trac.wordpress.org/changeset/1175403/portfolio-by-lisa-westlund

Exploit mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2015/Jul/104

Scores

EPSS 0.0118

EPSS Percentile 63.9%

Details

CWE

CWE-352

Status published

Products (1)

portfolio_project/portfolio < 1.0

Published Aug 19, 2015

Tracked Since Feb 18, 2026