WordPress Plugin Vulnerabilities

Member Approval 131109 - wp-admin/options-general.php Option Manipulation CSRF

Description

The member-approval WordPress plugin was affected by a wp-admin/options-general.php Option Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
member-approval
No known fix

References

CVE
CVE-2014-3850
URL
https://packetstormsecurity.com/files/#127024/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
52cefc55-7539-4e75-8225-dc7f1fe69b5f

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-04-04
Title
404 Image Redirection (Replace Broken Images) <= 1.4 - Cross-Site Request Forgery
Published
2025-10-02
Title
TextBuilder 1.0.0 - 1.1.1 - Cross-Site Request Forgery to Privilege Escalation via Account Takeover
Published
2023-03-17
Title
Contact Form 7 – PayPal & Stripe Add-on < 1.9.4 - Cross-Site Request Forgery
Published
2025-09-05
Title
SimaCookie <= 1.3.2 - Cross-Site Request Forgery
Published
2024-02-06
Title
Custom Twitter Feeds – A Tweets Widget or X Feed Widget < 2.2.2 - Cross-Site Request Forgery to Plugin Options Update