WordPress Plugin Vulnerabilities

Login With Ajax - Cross-Site Request Forgery

Description

The Login With Ajax WordPress plugin was affected by a Cross-Site Request Forgery security vulnerability.

Affects Plugins

Plugin icon
login-with-ajax
Fixed in 3.1

References

CVE
CVE-2013-2707

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
33ec1efa-2c38-45e9-b3de-31f37138c5c8

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-11-07
Title
WP Links Page < 4.9.5 - Cross-Site Request Forgery via wplf_ajax_update_screenshots
Published
2025-12-31
Title
Zoho ZeptoMail < 3.3.2 - Cross-Site Request Forgery
Published
2025-04-24
Title
Milat jQuery Automatic Popup <= 1.3.1 - Cross-Site Request Forgery to Stored Cross-site Scripting
Published
2022-11-11
Title
AdRotate Banner Manager < 5.9.1 - Password Change via CSRF
Published
2025-01-29
Title
WP Image Uploader <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletion