CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-3250

Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 27.3%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2013-3250

Wordpress » Wp Maintenance Mode Plugin » Version: Any

cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:*
Wordpress » Wp Maintenance Mode Plugin » Version: 1.8.0

cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.0
Wordpress » Wp Maintenance Mode Plugin » Version: 1.8.1

cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.1
Wordpress » Wp Maintenance Mode Plugin » Version: 1.8.2

cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.2
Wordpress » Wp Maintenance Mode Plugin » Version: 1.8.3

cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.3
Wordpress » Wp Maintenance Mode Plugin » Version: 1.8.4

cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.4
Wordpress » Wp Maintenance Mode Plugin » Version: 1.8.5

cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.5
Wordpress » Wp Maintenance Mode Plugin » Version: 1.8.6

cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-3250

Products

Pricing

Contact Us