Lucene search
FlexeraCVE-2013-2706HistoryApr 11, 2014 - 2:55 p.m.
CVE-2013-2706
2014-04-1114:55:05
CWE-352
flexera
web.nvd.nist.gov
23
cve-2013-2706
csrf
vulnerability
wordpress
stream video player
1.4.0
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
40.7%
Cross-site request forgery (CSRF) vulnerability in the Stream Video Player plugin 1.4.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.
Affected configurations
Node
rodrigo_polostream_video_playerMatch1.4.0
wordpresswordpressMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| rodrigo_polo | stream_video_player | 1.4.0 | cpe:2.3:a:rodrigo_polo:stream_video_player:1.4.0:*:*:*:*:*:*:* |
| wordpress | wordpress | - | cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-2706
2014-04-11 14:00:00
prion
prion
Cross site request forgery (csrf)
2014-04-11 14:55:00
patchstack
patchstack
WordPress Stream Video Player Plugin <= 1.4.0 - CSRF
2013-03-26 00:00:00
nvd
nvd
CVE-2013-2706
2014-04-11 14:55:05
wpvulndb
wpvulndb
Stream Video Player <= 1.4.0 - Setting Manipulation CSRF
2014-08-01 10:59:01
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
40.7%
Related for CVE-2013-2706