WordPress Plugin Vulnerabilities

LiveOptim 1.1.3 - Configuration Setting Manipulation CSRF

Description

The SEO Plugin LiveOptim WordPress plugin was affected by a Configuration Setting Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
liveoptim
Fixed in 1.1.4

References

CVE
CVE-2014-100001

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
c29c3280-9515-4dba-b380-1941a7413318

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-03-24
Title
Replace Default Words <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2016-12-21
Title
copy-me 1.0.0 - Copy Posts Cross-Site Request Forgery (CSRF)
Published
2023-12-28
Title
Strong Testimonials < 3.1.11 - Settings Update via CSRF
Published
2024-01-10
Title
Profile Builder Pro < 3.10.1 - Cross-Site Request Forgery
Published
2025-01-25
Title
VikBooking Hotel Booking Engine & PMS < 1.7.3 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload