CVE-2014-4163 in Featured Comments

Sumário (Inglês)

Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a comment via a request to wp-admin/admin-ajax.php.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

16/06/2014

Divulgação

16/06/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
70058	Featured Comments Falsificação de Pedido entre Sites	352	Prova de conceito	Não definido	CVE-2014-4163

Fontes

• MITRE
• NVD
• CVE Details