WordPress Stream Video Player Plugin <= 1.4.0 - CSRF

2013-03-2600:00:00

N/A

patchstack.com

EPSS

0.001

Percentile

40.7%

JSON

Because of this vulnerability, the attackers can hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.

Solution

           Update the plugin.

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2706

EPSS

0.001

Percentile

40.7%

JSON

Related for PATCHSTACK:6BC3068751854F617AD5E9B11F9A3BC6