WordPress Plugin Vulnerabilities

JW Player 2.1.2 - wp-admin/admin.php Player Deletion CSRF

Description

The jw-player-plugin-for-wordpress WordPress plugin was affected by a wp-admin/admin.php Player Deletion CSRF security vulnerability.

Affects Plugins

Plugin icon
jw-player-plugin-for-wordpress
No known fix

References

CVE
CVE-2014-4030
URL
https://packetstormsecurity.com/files/#127025/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
a0e61690-cfbe-4d3c-b802-e3ce8c39c2e3

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-01-10
Title
WP Register Profile With Shortcode < 3.6.0 - Cross-Site Request Forgery to User Password Reset
Published
2024-07-09
Title
Internal Link Juicer: SEO Auto Linker for WordPress < 2.24.4 - Cross-Site Request Forgery
Published
2025-01-31
Title
WordPress Signature <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2022-05-30
Title
CaPa Protect <= 0.5.8.2 - Arbitrary Settings Update via CSRF
Published
2025-06-27
Title
Address Autocomplete via Google for Gravity Forms < 1.3.5 - CSRF