WordPress Plugin Vulnerabilities

WP125 < 1.5.0 - CSRF

Description

The WP125 WordPress plugin was affected by a CSRF security vulnerability.

Affects Plugins

Plugin icon
wp125
Fixed in 1.5.0

References

CVE
CVE-2013-2700

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
e25aa788-73a1-4481-88fd-4071bbfdcc10

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2021-10-04
Title
Far Future Expiry Header < 1.5 - Plugin's Settings Update via CSRF
Published
2025-01-16
Title
Len Slider <= 2.0.11 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Published
2025-03-11
Title
Custom Dashboard Page <= 1.0 - Cross-Site Request Forgery
Published
2023-09-29
Title
WP Hide Pages <= 1.0 - Settings Update via CSRF
Published
2022-04-15
Title
MicroPayments < 1.9.6 - Arbitrary Settings Update via CSRF