Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of administrators for requests that move comments to the moderation list.
Max Base Score | 6.8 |
Published | 2013-12-30 |
Updated | 2013-12-31 |
EPSS | 0.16% |
1 vulnerabilities found