PT-2013-4258 · Shareaholic · Shareaholic Sexybookmarks Plugin

Published 2013-08-08 · Updated 2017-08-29 · CVE-2013-3256

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Shareaholic SexyBookmarks plugin version 6.1.4.0

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of users for requests that manipulate plugin settings.

Recommendations For Shareaholic SexyBookmarks plugin version 6.1.4.0, consider disabling the plugin until a patch is available to prevent manipulation of plugin settings.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2013-3256

Affected Products

Shareaholic Sexybookmarks Plugin

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-3256 · Security Note
• http://secunia.com/advisories/53138 · Vendor Advisory
• http://securityfocus.com/bid/61561 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86126 · Note
• http://wordpress.org/plugins/sexybookmarks/changelog · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3256 · Note