medium6.8
CVE-2014-3907
Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to …
Impact
Cross-site request forgery (CSRF) vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mailpoet | Mailpoet Newsletters | through 2.6.10 Versions 0.9, 0.9.1, 0.9.2, 0.9.6, 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN94409737/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000101
- http://wordpress.org/plugins/wysija-newsletters/changelog/
- http://jvn.jp/en/jp/JVN94409737/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000101
- http://wordpress.org/plugins/wysija-newsletters/changelog/