NetSight
medium6.8

CVE-2013-3252

Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijac…

Impact

Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.

Affected products

VendorProductAffected versions
LesterchanWp-Postviews
through 1.62
Versions 1.00, 1.01, 1.02, 1.10, 1.11

Weakness classification

References