CVE-2013-3257

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-05-14T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01.000Z", "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "shortName": "flexera"}, "references": [{"name": "53122", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/53122"}, {"name": "wp-relatedposts-cve20133257-unspecified-csrf(84245)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84245"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://wordpress.org/plugins/related-posts/changelog/"}, {"name": "59836", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/59836"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "PSIRT-CNA@flexerasoftware.com", "ID": "CVE-2013-3257", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "53122", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/53122"}, {"name": "wp-relatedposts-cve20133257-unspecified-csrf(84245)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84245"}, {"name": "http://wordpress.org/plugins/related-posts/changelog/", "refsource": "CONFIRM", "url": "http://wordpress.org/plugins/related-posts/changelog/"}, {"name": "59836", "refsource": "BID", "url": "http://www.securityfocus.com/bid/59836"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T16:07:35.934Z"}, "title": "CVE Program Container", "references": [{"name": "53122", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/53122"}, {"name": "wp-relatedposts-cve20133257-unspecified-csrf(84245)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84245"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://wordpress.org/plugins/related-posts/changelog/"}, {"name": "59836", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/59836"}]}]}, "cveMetadata": {"assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "assignerShortName": "flexera", "cveId": "CVE-2013-3257", "datePublished": "2014-06-02T15:00:00.000Z", "dateReserved": "2013-04-22T00:00:00.000Z", "dateUpdated": "2024-08-06T16:07:35.934Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "PSIRT-CNA@flexerasoftware.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zemanta:related_posts:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "4A5EAE2B-D18C-4C81-8B47-39A0D13A41E0", "versionEndIncluding": "2.7.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.0:*:*:*:*:wordpress:*:*", "matchCriteriaId": "D7774D9E-549A-4240-B5DA-98EA0C06127B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.1:*:*:*:*:wordpress:*:*", "matchCriteriaId": "71E49B56-6FF5-4668-AF0F-47CD3B1D0D6B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.2:*:*:*:*:wordpress:*:*", "matchCriteriaId": "820277FA-4C3B-48CA-B19A-FB3914FE7D77", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3:*:*:*:*:wordpress:*:*", "matchCriteriaId": "3AE14921-E43A-4BA4-8444-12F209E68929", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3.1:*:*:*:*:wordpress:*:*", "matchCriteriaId": "8993E5FB-2E3A-4524-BD93-1F7092F11BCC", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3.2:*:*:*:*:wordpress:*:*", "matchCriteriaId": "83DBBF6E-FE8C-4843-B390-C1AADFFD3AD3", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.3.3:*:*:*:*:wordpress:*:*", "matchCriteriaId": "D87740F4-03B5-42A4-B513-7BD866865588", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.4:*:*:*:*:wordpress:*:*", "matchCriteriaId": "5195FAC6-8F38-4D8E-893A-BE4B9FB93DCF", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.5:*:*:*:*:wordpress:*:*", "matchCriteriaId": "58A991EB-062F-4612-B2A5-FFF759928420", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.6:*:*:*:*:wordpress:*:*", "matchCriteriaId": "2A9AF413-90AC-4227-860A-8D657D09A53B", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.7:*:*:*:*:wordpress:*:*", "matchCriteriaId": "CBCDBB6D-9E00-4610-8A6B-A74E08D8043F", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.8:*:*:*:*:wordpress:*:*", "matchCriteriaId": "C32EA5B9-0FCB-4E60-8E7E-54729147AB33", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:1.8.1:*:*:*:*:wordpress:*:*", "matchCriteriaId": "401EEA87-DEE7-4ED9-B310-032C154D6C2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.3:*:*:*:*:wordpress:*:*", "matchCriteriaId": "8D654CF3-EECC-49A6-A8D8-C8FFCCC34AF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.4.1:*:*:*:*:wordpress:*:*", "matchCriteriaId": "18FE06DB-B338-4492-9FE8-DF225D2277DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.5.1:*:*:*:*:wordpress:*:*", "matchCriteriaId": "BC1FD22B-9CD6-40EB-8D36-473D60331DFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.6:*:*:*:*:wordpress:*:*", "matchCriteriaId": "02B55E20-E2D9-4341-9BF2-389B59BC0C23", "vulnerable": true}, {"criteria": "cpe:2.3:a:zemanta:related_posts:2.7:*:*:*:*:wordpress:*:*", "matchCriteriaId": "0943DA33-D46D-45BC-815C-1715440F1067", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de CSRF en el plugin Related Posts anterior a 2.7.2 para WordPress permite a atacantes remotos secuestrar la autenticaci\u00f3n de usuarios para solicitudes que modifican configuraciones a trav\u00e9s de vectores no especificados."}], "id": "CVE-2013-3257", "lastModified": "2026-06-16T23:54:47.723", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2014-06-02T15:55:10.200", "references": [{"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://secunia.com/advisories/53122"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Patch"], "url": "http://wordpress.org/plugins/related-posts/changelog/"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/bid/59836"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84245"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/53122"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://wordpress.org/plugins/related-posts/changelog/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/59836"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84245"}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}