Unscored severity · published May 10, 2013
CVE-2013-2707
Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for…
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LW
Login With Ajax · Netweblogic
2.1; 2.1.1; 2.1.2; 2.1.3; 2.1.4; 2.1.5; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2707
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2707
Vendor Advisory
http://secunia.com/advisories/52950
Patch
http://wordpress.org/extend/plugins/login-with-ajax/changelog/
More from Login With Ajax
–
CVE-2012-4283
Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback…
–
CVE-2012-2759
Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject…