WordPress Plugin Vulnerabilities

Mingle Forum 1.0.35 - Privilege Escalation CSRF

Description

The mingle-forum WordPress plugin was affected by a Privilege Escalation CSRF security vulnerability.

Affects Plugins

Plugin icon
mingle-forum
No known fix

References

CVE
CVE-2013-0736

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
e7eed1e0-c8ae-4cbe-80a9-b5823200eecd

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-16
Title
Marquee Style RSS News Ticker <= 3.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2023-09-25
Title
BEAR for WordPress < 1.1.4 - Arbitrary Settings Update via CSRF
Published
2024-06-21
Title
Book Landing Page < 1.2.4 - Cross-Site Request Forgery to Notice Dismissal
Published
2025-04-09
Title
Anant Addons for Elementor < 1.1.9 - Arbitrary Plugin Installation via CSRF
Published
2021-09-13
Title
Travelpayouts < 1.0.17 - CSRF Bypass due to Outdated Redux Framework