{"api_version":"1","generated_at":"2026-07-23T18:57:39+00:00","cve":"CVE-2013-0736","urls":{"html":"https://cve.report/CVE-2013-0736","api":"https://cve.report/api/cve/CVE-2013-0736.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-0736","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-0736"},"summary":{"title":"CVE-2013-0736","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting (XSS) attacks via unspecified vectors.","state":"PUBLISHED","assigner":"flexera","published_at":"2013-10-09 22:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-352","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/62133","name":"http://www.securityfocus.com/bid/62133","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WordPress Mingle Forum Plugin CVE-2013-0736 Cross Site Request Forgery Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/96905","name":"http://osvdb.org/96905","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/47687","name":"http://secunia.com/advisories/47687","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/secunia_research/2013-6","name":"http://secunia.com/secunia_research/2013-6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About Secunia Research | Flexera","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0736","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0736","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.00","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.01","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.02","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.03","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.04","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.05","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.06","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.07","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.08","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.09","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.21.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.23.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.23.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.26","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.27","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.28","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.28.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.28.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.29","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.30","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.31","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.31.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.31.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.31.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.31.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.32","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.32.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"1.0.33","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"1","versionEndIncluding":"1.0.34","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cartpauj","cpe5":"mingle-forum","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"736","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T14:33:05.800Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"62133","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/62133"},{"name":"96905","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/96905"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://secunia.com/secunia_research/2013-6"},{"name":"47687","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/47687"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting (XSS) attacks via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-10-09T22:00:00.000Z","orgId":"44d08088-2bea-4760-83a6-1e9be26b15ab","shortName":"flexera"},"references":[{"name":"62133","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/62133"},{"name":"96905","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/96905"},{"tags":["x_refsource_MISC"],"url":"http://secunia.com/secunia_research/2013-6"},{"name":"47687","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/47687"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"PSIRT-CNA@flexerasoftware.com","ID":"CVE-2013-0736","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting (XSS) attacks via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"62133","refsource":"BID","url":"http://www.securityfocus.com/bid/62133"},{"name":"96905","refsource":"OSVDB","url":"http://osvdb.org/96905"},{"name":"http://secunia.com/secunia_research/2013-6","refsource":"MISC","url":"http://secunia.com/secunia_research/2013-6"},{"name":"47687","refsource":"SECUNIA","url":"http://secunia.com/advisories/47687"}]}}}},"cveMetadata":{"assignerOrgId":"44d08088-2bea-4760-83a6-1e9be26b15ab","assignerShortName":"flexera","cveId":"CVE-2013-0736","datePublished":"2013-10-09T22:00:00.000Z","dateReserved":"2013-01-02T00:00:00.000Z","dateUpdated":"2024-09-16T20:16:36.933Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-10-09 22:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-352","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.34","matchCriteriaId":"75391F81-6F01-4B3D-BD2E-9C4F05C77C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.00:*:*:*:*:*:*:*","matchCriteriaId":"0575F80A-8CF3-4E21-8A00-8CF98B0A2ECA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.01:*:*:*:*:*:*:*","matchCriteriaId":"840FCA04-3334-4D4A-9F89-42DAEB6D6163"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.02:*:*:*:*:*:*:*","matchCriteriaId":"5FDBBB4B-1ED6-4F90-8FF6-2B4137FF7729"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.03:*:*:*:*:*:*:*","matchCriteriaId":"6CB7EBEF-CEED-4947-B751-B675733ABD89"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.04:*:*:*:*:*:*:*","matchCriteriaId":"AF012118-3D0B-44DA-93D2-8D3C3C39CF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.05:*:*:*:*:*:*:*","matchCriteriaId":"B708A6F8-F41A-4DC9-B943-720A57C614F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.06:*:*:*:*:*:*:*","matchCriteriaId":"C0978EC7-8F0E-47C1-88F9-3D695F4B9B87"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.07:*:*:*:*:*:*:*","matchCriteriaId":"9F23F22C-FAC4-4933-AC93-B526B6E2CA03"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.08:*:*:*:*:*:*:*","matchCriteriaId":"292551C2-6279-47F4-A878-3E83E71FFD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.09:*:*:*:*:*:*:*","matchCriteriaId":"95F56C25-68B4-46E9-8D91-9832759C6026"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"7BF3FA6A-5C03-4817-87FC-12603DF05332"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"EB033E81-9346-4160-B83B-E67D264DBEB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"99C8F213-BED5-438A-BDB4-3DA5F4B4D158"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"24EC039D-E4BD-4F85-82E2-E74F50C1E4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"EFF7E37B-61C4-4354-9A7C-92C47F25A608"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"2D75DACF-1E07-4940-B4CD-D80845FE351C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"2ED47732-4DBD-4374-8C47-859455D4CEDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.17:*:*:*:*:*:*:*","matchCriteriaId":"FC4448FE-8B97-44A8-ADC4-9041751084AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"C95A3680-677E-4862-801D-AFA4391D8828"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.19:*:*:*:*:*:*:*","matchCriteriaId":"CA87C76B-898B-4978-BD3E-4FB04C18CBAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"6CFF9F60-0181-4ABA-B6F3-45E7460E4E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.21:*:*:*:*:*:*:*","matchCriteriaId":"A5306D96-3FCA-467D-AE66-37BEFB44ACFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.21.1:*:*:*:*:*:*:*","matchCriteriaId":"D34BD47A-A20F-498E-856A-12BADA8A666D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.22:*:*:*:*:*:*:*","matchCriteriaId":"1E548339-70C7-4346-B23A-7D2C3ABC7486"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.23:*:*:*:*:*:*:*","matchCriteriaId":"936CA7DC-AB5C-4E6F-B50D-71E0408F06B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.23.1:*:*:*:*:*:*:*","matchCriteriaId":"59D2E42A-FDD0-4A30-A62D-E17AC027C768"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.23.2:*:*:*:*:*:*:*","matchCriteriaId":"3071F8CA-748D-44A7-AAE9-FC5F2E50ED15"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.24:*:*:*:*:*:*:*","matchCriteriaId":"CF92294F-9ABE-4038-B3DA-C16C0515666D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.25:*:*:*:*:*:*:*","matchCriteriaId":"500BE334-4811-440D-BF65-0D1DC3328FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.26:*:*:*:*:*:*:*","matchCriteriaId":"5C16C002-2F14-4926-9CF2-50745EA0F62B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.27:*:*:*:*:*:*:*","matchCriteriaId":"5AF093A7-6343-4EBE-9A06-AE670F4D9119"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.28:*:*:*:*:*:*:*","matchCriteriaId":"7E93A0CE-2B4B-498F-95E4-C33D1850C876"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.28.1:*:*:*:*:*:*:*","matchCriteriaId":"181E1DF5-CB65-4219-96AF-82C270B7EAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.28.2:*:*:*:*:*:*:*","matchCriteriaId":"A033047B-8178-4BCC-AAC1-944EC0FE0143"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.29:*:*:*:*:*:*:*","matchCriteriaId":"626382E0-7A71-4191-A92C-058E36850D66"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.30:*:*:*:*:*:*:*","matchCriteriaId":"6381407B-C185-4A08-94A4-7325B693DFA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.31:*:*:*:*:*:*:*","matchCriteriaId":"1818BA74-491B-4C7C-AAFF-9CB7E7CBCEAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.31.1:*:*:*:*:*:*:*","matchCriteriaId":"5F731579-C039-4631-A159-3F03C15CE9BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.31.2:*:*:*:*:*:*:*","matchCriteriaId":"4393F949-DB12-4AC2-9DF5-FCBDCE366261"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.31.3:*:*:*:*:*:*:*","matchCriteriaId":"DE317122-A3D1-4FD2-9712-8458A009F9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.31.4:*:*:*:*:*:*:*","matchCriteriaId":"94A469D5-9AC7-4D47-8FCC-905D45CE096F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.32:*:*:*:*:*:*:*","matchCriteriaId":"3F976A13-60CA-47C1-8A56-40FC20F120B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.32.1:*:*:*:*:*:*:*","matchCriteriaId":"9A89A57B-8CB6-4778-A410-84ADFC59B8E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cartpauj:mingle-forum:1.0.33:*:*:*:*:*:*:*","matchCriteriaId":"FF0A6618-9067-441F-A57D-B4B5C1D02BE5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*","matchCriteriaId":"A77EB0E7-7FA7-4232-97DF-7C7587D163F1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"736","Ordinal":"1","Title":"CVE-2013-0736","CVE":"CVE-2013-0736","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"736","Ordinal":"1","NoteData":"Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting (XSS) attacks via unspecified vectors.","Type":"Description","Title":"CVE-2013-0736"},{"CveYear":"2013","CveId":"736","Ordinal":"2","NoteData":"2013-10-09","Type":"Other","Title":"Published"}]}}}