Unrated severityNVD Advisory· Published Jul 12, 2013· Updated Apr 29, 2026
CVE-2013-2704
CVE-2013-2704
Description
Cross-site request forgery (CSRF) vulnerability in the Dropdown Menu Widget plugin 1.9.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences.
Affected products
1- cpe:2.3:a:metin_saylan:dropdown_menu_widget:1.9.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- secunia.com/advisories/52958nvdVendor Advisory
- wordpress.org/plugins/dropdown-menu-widget/changelog/nvdVendor Advisory
News mentions
0No linked articles in our index yet.