Cross-site request forgery (CSRF) vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 6.8 | MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://secunia.com/advisories/53120 | PSIRT-CNA@flexerasoftware.com | N/A |
| http://wordpress.org/plugins/digg-digg/changelog/ | PSIRT-CNA@flexerasoftware.com | Patch |
| http://www.securityfocus.com/bid/60046 | PSIRT-CNA@flexerasoftware.com | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/84418 | PSIRT-CNA@flexerasoftware.com | N/A |
| http://secunia.com/advisories/53120 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://wordpress.org/plugins/digg-digg/changelog/ | af854a3a-2127-422b-91ae-364da2661108 | Patch |
| http://www.securityfocus.com/bid/60046 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/84418 | af854a3a-2127-422b-91ae-364da2661108 | N/A |