NVD

Id
36108  
Name
CVE-2014-9401  
Description
Cross-site request forgery (CSRF) vulnerability in the WP Limit Posts Automatically plugin 0.7 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the lpa_post_letters parameter in the wp-limit-posts-automatically.php page to wp-admin/options-general.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-31  
Modified Date
2015-01-12  
Seq
2014-9401  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184537 36108 CVE-2014-9401 http://packetstormsecurity.com/files/129647/WordPress-WP-Limit-Posts-Automatically-0.7-CSRF-XSS.html  View
184538 36108 CVE-2014-9401 limitpostsauto-wplimitpostsautom-csrf(99427)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18583 JVNDB-2014-007458 WordPress 用 WP Limit Posts Automatically プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 WordPress 用 WP Limit Posts Automatically プラグインには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-9401 76694 CVE-2014-9401 36108 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007458.html 2014-12-09 2015-01-06 View