Cross-Site Request Forgery Vulnerability in Google Document Embedder for WordPress
CVE-2016-10882

8.8HIGH

Key Information:

Vendor
Wordpress
Status
Google Doc Embedder
Vendor
CVE Published:
14 August 2019

Summary

The Google Document Embedder plugin for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability affecting versions prior to 2.6.2. This flaw allows unauthorized actions to be performed on behalf of users without their consent, potentially leading to unintended consequences such as user data manipulation.

References

https://wordpress.org/plugins/google-document-embedder/#d...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.