CVE-2013-3479
NONE EPSS 63.8%
Published Sep 5, 201312y ago · Modified Jun 16, 20262w ago
Published Sep 5, 2013 12y ago
Last Modified Jun 16, 2026 2w ago
Description
Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.
Threat Intelligence
EPSS Exploit Probability
63.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-352 Cross-Site Request Forgery (CSRF) Authentication
Affected Products 11
| Vendor | Product | Version | Range |
|---|---|---|---|
| sharethis | sharethis | * | ≤7.0.5 |
| sharethis | sharethis | 5.2.1 | any |
| sharethis | sharethis | 5.3 | any |
| sharethis | sharethis | 5.4.1 | any |
| sharethis | sharethis | 6.0 | any |
| sharethis | sharethis | 7.0 | any |
| sharethis | sharethis | 7.0.1 | any |
| sharethis | sharethis | 7.0.2 | any |
| sharethis | sharethis | 7.0.3 | any |
| sharethis | sharethis | 7.0.4 | any |
| wordpress | wordpress | * | any |
References 2
- secunia.com http://secunia.com/advisories/53135
- wordpress.org http://wordpress.org/plugins/share-this/changelog/
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.