Vulnerabilities and Security Researches

WP-DownloadManager, CVE-2013-2697

CVE, Research URL: CVE-2013-2697
Home page URL: Security reports for WP-DownloadManager
Application: WP-DownloadManager
Published on: Apr 19, 2013
Research Description: Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Affected versions: max 1.61.
Status: vulnerable