NVD

Id
31947  
Name
CVE-2014-3850  
Description
Cross-site request forgery (CSRF) vulnerability in the Member Approval plugin 131109 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings to their default and disable registration approval via a request to wp-admin/options-general.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-11  
Modified Date
2014-06-12  
Seq
2014-3850  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168300 31947 CVE-2014-3850 20140610 CSRF in Member Approval 131109 permits unapproved registrations (WordPress plugin)  View
168301 31947 CVE-2014-3850 https://security.dxw.com/advisories/csrf-in-member-approval-131109-permits-unapproved-registrations  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14035 JVNDB-2014-002910 WordPress 用 Member Approval プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 WordPress 用 Member Approval プラグインには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-3850 71138 CVE-2014-3850 31947 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002910.html 2014-06-10 2014-06-16 View