CVE-2013-2697
EUVD-2013-263619.04.2013, 11:44
Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| lesterchan | wp-downloadmanager | 𝑥 ≤ 1.60 |
| lesterchan | wp-downloadmanager | 1.00 |
| lesterchan | wp-downloadmanager | 1.30 |
| lesterchan | wp-downloadmanager | 1.31 |
| lesterchan | wp-downloadmanager | 1.40 |
| lesterchan | wp-downloadmanager | 1.50 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration