WordPress Facebook Members Plugin <= 5.0.4 - CSRF

2013-03-2600:00:00

N/A

patchstack.com

0.001 Low

EPSS

Percentile

35.5%

Because of this vulnerability, the attackers can hijack the authentication of administrators for requests that modify this plugin’s settings.

Solution

           Update the plugin.

CPENameOperatorVersion
facebook membersle5.0.4

CPE	Name	Operator	Version
	facebook members	le	5.0.4

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2703

0.001 Low

EPSS

Percentile

35.5%

Related for PATCHSTACK:97F347FB7EDC7C4BAC0129ACA8F3594B