WordPress Plugin Vulnerabilities

qTranslate 2.5.34 - Setting Manipulation CSRF

Description

The qtranslate WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
qtranslate
No known fix

References

CVE
CVE-2013-3251

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
398710f4-17a5-40ba-b4b4-5b5904e5e217

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2024-04-11
Title
Sync Post With Other Site <= 1.5.1 - Cross-Site Request Forgery
Published
2023-02-28
Title
WP Insurance < 2.1.4 - Arbitrary Plugin Activation via CSRF
Published
2022-07-26
Title
WP Coder < 2.5.3 - Code Deletion via CSRF
Published
2018-12-18
Title
Two Factor Authentication <= 1.3.12 - Disable Two Factor Authentication CSRF
Published
2021-08-16
Title
Post Carousel < 2.3.5 - CSRF Bypass / Unauthorised AJAX Calls