CVE-2013-7233

Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of administrators for requests that move comments to the moderation list.

Published: Dec 30, 2013
Updated: Apr 13, 2023
CVE: CVE-2013-7233
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-352

Affected Software
References

Software	From	Fixed in
WordPress / wordpress	2.0	2.0.x
WordPress / wordpress	2.0.2	2.0.2.x
WordPress / wordpress	2.0.6	2.0.6.x
WordPress / wordpress	2.0.1	2.0.1.x
WordPress / wordpress	2.0.4	2.0.4.x
WordPress / wordpress	2.0.7	2.0.7.x
WordPress / wordpress	2.0.5	2.0.5.x
WordPress / wordpress	2.0.9	2.0.9.x
WordPress / wordpress	2.0.10	2.0.10.x
WordPress / wordpress	-	2.0.11.x
WordPress / wordpress	2.0.8	2.0.8.x

http://seclists.org/fulldisclosure/2013/Dec/145
http://www.osvdb.org/101184

Vulnerability Database

290,020

CVE-2013-7233