CVE-2013-3252

no score yetEPSS 1.1%

Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2014-04-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

lesterchan:wp-postviews

References

http://osvdb.org/93096
http://secunia.com/advisories/53127
http://wordpress.org/plugins/wp-postviews/changelog
http://osvdb.org/93096
http://secunia.com/advisories/53127

Check your stack JSON