CVE-2013-2699
10.04.2014, 20:29
Cross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote attackers to hijack the authentication of administrators for requests that deactivate a plugin via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| underconstruction_project | underconstruction | 𝑥 ≤ 1.08 |
| underconstruction_project | underconstruction | 1.0 |
| underconstruction_project | underconstruction | 1.01 |
| underconstruction_project | underconstruction | 1.02 |
| underconstruction_project | underconstruction | 1.03 |
| underconstruction_project | underconstruction | 1.04 |
| underconstruction_project | underconstruction | 1.05 |
| underconstruction_project | underconstruction | 1.06 |
| underconstruction_project | underconstruction | 1.07 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration