Contextual Related Posts, CVE-2013-2710

CVE, Research URL: CVE-2013-2710
Home page URL: Security reports for Contextual Related Posts
Application: Contextual Related Posts
Published on: Jun 02, 2014
Research Description: Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via unspecified vectors.
Affected versions: Min -, max 3.3.1.
Status: vulnerable