CVE-2013-3253

CVE-2013-3253

EPSS 1.2%

Cross-site request forgery (CSRF) vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://forum.xhanch.com/index.php/topic%2C3806.0.html http://plugins.trac.wordpress.org/changeset/750054/xhanch-my-twitter http://secunia.com/advisories/53133 http://www.securityfocus.com/bid/61629