Vulnerabilities and Security Researches

Calendar, CVE-2013-2698

CVE, Research URL: CVE-2013-2698
Home page URL: Security reports for Calendar
Application: Calendar
Published on: May 27, 2014
Research Description: Cross-site request forgery (CSRF) vulnerability in the Calendar plugin before 1.3.3 for WordPress allows remote attackers to hijack the authentication of users for requests that add a calendar entry via unspecified vectors.
Affected versions: max 1.3.8.
Status: vulnerable