VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 2, 2014· Updated May 6, 2026

CVE-2013-3476

CVE-2013-3476

Description

Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors.

Affected products

17
  • Zemanta/Related Posts17 versions
    cpe:2.3:a:zemanta:related_posts:1.0:*:*:*:*:wordpress:*:*+ 16 more
    • cpe:2.3:a:zemanta:related_posts:1.0:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.3.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.3.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.3.3:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.3:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.4:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.5:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.6:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.7:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.8.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:1.8:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:2.3:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:2.4.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:2.5.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:zemanta:related_posts:*:*:*:*:*:wordpress:*:*range: <=2.6

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.