WordPress Plugin Vulnerabilities

All in one webmaster 8.2.3 - Script Insertion CSRF

Description

The All in One Webmaster WordPress plugin was affected by a Script Insertion CSRF security vulnerability.

Affects Plugins

Plugin icon
all-in-one-webmaster
Fixed in 8.2.4

References

CVE
CVE-2013-2696

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
73e25bb1-b1ee-48e7-8f4f-6335285e95ae

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-10-13
Title
Mailrelay < 2.1.2 - Arbitrary Settings Update via CSRF
Published
2024-12-16
Title
SMS for WooCommerce < 2.8.1.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Published
2023-03-31
Title
Really Simple Google Tag Manager < 1.0.7 - Arbitrary Plugin Activation via CSRF
Published
2025-04-09
Title
User Registration Using Contact Form 7 < 2.5 - Cross-Site Request Forgery
Published
2024-07-01
Title
Highlight < 1.0.30 - Cross-Site Request Forgery to Notice Dismissal