{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2013-06-21T20:00:00.000Z", "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "shortName": "flexera"}, "references": [{"name": "53125", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/53125"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://wordpress.org/plugins/wp-maintenance-mode/changelog/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "PSIRT-CNA@flexerasoftware.com", "ID": "CVE-2013-3250", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "53125", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/53125"}, {"name": "http://wordpress.org/plugins/wp-maintenance-mode/changelog/", "refsource": "CONFIRM", "url": "http://wordpress.org/plugins/wp-maintenance-mode/changelog/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T16:07:35.953Z"}, "title": "CVE Program Container", "references": [{"name": "53125", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/53125"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://wordpress.org/plugins/wp-maintenance-mode/changelog/"}]}]}, "cveMetadata": {"assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "assignerShortName": "flexera", "cveId": "CVE-2013-3250", "datePublished": "2013-06-21T20:00:00.000Z", "dateReserved": "2013-04-22T00:00:00.000Z", "dateUpdated": "2024-09-16T20:16:46.092Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:*:*:*:*:*:*:*:*", "matchCriteriaId": "E136FEB1-CB0A-4C5A-B25E-DD906D530717", "versionEndIncluding": "1.8.7", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "2D100EAA-744F-4012-AB8C-A7CD4804892D", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "95EEB475-595A-4375-948A-026A94BB12B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "244BAC6A-0685-4C36-9D95-73CAA63D501B", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "065D170F-E681-4DD8-A4D6-E14B64F9FCBB", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "AB7103DF-ED99-4D4A-913F-ECAB0EF07CBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "7A94D937-EB64-4DD4-83C0-70BF6162095B", "vulnerable": true}, {"criteria": "cpe:2.3:a:wordpress:wp_maintenance_mode_plugin:1.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "C3D0AA7A-4351-4CBB-85F2-FBBA2F8F1F07", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de falsificaci\u00f3n de petici\u00f3n en sitios cruzados (CSRF) en el plugin WP Maintenance Mode anterior a v1.8.8 para WordPress , permite a atacantes remotos secuestrar la autenticaci\u00f3n de los usuarios para solicitudes que modifican la configuraci\u00f3n de los plugins."}], "id": "CVE-2013-3250", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2013-06-21T20:55:01.053", "references": [{"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://secunia.com/advisories/53125"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://wordpress.org/plugins/wp-maintenance-mode/changelog/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/53125"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://wordpress.org/plugins/wp-maintenance-mode/changelog/"}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}