CVE-2013-3250

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP Maintenance Mode Plugin
Vendor
CVE Published:
21 June 2013

Summary

Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.

References

http://secunia.com/advisories/53125
third-party-advisoryx_refsource_SECUNIA
http://wordpress.org/plugins/wp-maintenance-mode/changelog/
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.