WordPress Simple Shopping Cart, CVE-2013-2705

CVE, Research URL: CVE-2013-2705
Home page URL: Security reports for WordPress Simple Shopping Cart
Application: WordPress Simple Shopping Cart
Published on: May 13, 2014
Research Description: Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings.
Affected versions: Min -, max 3.6.
Status: vulnerable