NVD

Id
39879  
Name
CVE-2013-4240  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add new testimonials via the hms-testimonials-addnew page, (2) add new groups via the hms-testimonials-addnewgroup page, (3) change default settings via the hms-testimonials-settings page, (4) change advanced settings via the hms-testimonials-settings-advanced page, (5) change custom fields settings via the hms-testimonials-settings-fields page, or (6) change template settings via the hms-testimonials-templates-new page to wp-admin/admin.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-04-02  
Modified Date
2014-04-02  
Seq
2013-4240  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
202827 39879 CVE-2013-4240 20130808 [RCA-201308-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities  View
202828 39879 CVE-2013-4240 20130809 Update [RCA-201309-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities  View
202829 39879 CVE-2013-4240 [oss-security] 20130810 CVE Request - HMS Testimonials 2.0.10 WP plugin  View
202830 39879 CVE-2013-4240 [oss-security] 20130812 Re: Re: CVE Request - HMS Testimonials 2.0.10 WP plugin  View
202831 39879 CVE-2013-4240 http://wordpress.org/plugins/hms-testimonials/changelog  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24709 JVNDB-2013-006284 WordPress 用 HMS Testimonials プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 WordPress 用 HMS Testimonials プラグインには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-4240 64182 CVE-2013-4240 39879 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006284.html 2013-08-08 2014-04-04 View