medium6.8
CVE-2013-2699
Cross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote attackers to hijack the authentication …
Impact
Cross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote attackers to hijack the authentication of administrators for requests that deactivate a plugin via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Underconstruction Project | Underconstruction | through 1.08 Versions 1.0, 1.01, 1.02, 1.03, 1.04 |