WordPress Plugin Vulnerabilities

Simple Fields 1.1.6 - Admin Functions CSRF

Description

The Simple Fields WordPress plugin was affected by an Admin Functions CSRF security vulnerability.

Affects Plugins

Plugin icon
simple-fields
Fixed in 1.2

References

CVE
CVE-2013-7476

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
3038c822-cdae-4bdc-a53d-6fa3eb2015de

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-02-02
Title
Quicksand Post Filter jQuery Plugin <= 3.1.1 - Cross-Site Request Forgery via renderAdmin
Published
2021-02-08
Title
NextGen Gallery < 3.5.0 - CSRF allows File Upload
Published
2026-04-21
Title
Google PageRank Display <= 1.4 - Cross-Site Request Forgery to Settings Update via Settings Page
Published
2025-12-11
Title
IMAQ Core <= 1.2.1 - Cross-Site Request Forgery to URL Structure Update
Published
2024-05-07
Title
Joli FAQ SEO – WordPress FAQ Plugin < 1.3.3 - Cross-Site Request Forgery