CSRF Vulnerability in Stream Video Player Plugin for WordPress
CVE-2013-2706

Currently unrated

Key Information:

Vendor

Wordpress
Status
Stream Video Player
Vendor
CVE Published:
11 April 2014

What is CVE-2013-2706?

The Stream Video Player plugin version 1.4.0 for WordPress is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw enables remote attackers to manipulate authenticated sessions of administrators, potentially allowing unauthorized changes to plugin settings through malicious requests. Without verification checks, the attacker can exploit this vulnerability to execute unauthorized actions on behalf of the administrator, compromising the integrity and security of the WordPress site.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://osvdb.org/94466
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/52954
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.