{"api_version":"1","generated_at":"2026-07-23T06:41:40+00:00","cve":"CVE-2013-3477","urls":{"html":"https://cve.report/CVE-2013-3477","api":"https://cve.report/api/cve/CVE-2013-3477.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-3477","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-3477"},"summary":{"title":"CVE-2013-3477","description":"Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors.","state":"PUBLISHED","assigner":"flexera","published_at":"2014-05-27 14:55:10","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-352","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/84246","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/84246","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://wordpress.org/plugins/related-posts-by-zemanta/changelog/","name":"http://wordpress.org/plugins/related-posts-by-zemanta/changelog/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WordPress › Related Posts by Zemanta « WordPress Plugins","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/53321","name":"http://secunia.com/advisories/53321","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/59840","name":"http://www.securityfocus.com/bid/59840","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WordPress Related Posts by Zemanta Plugin Cross Site Request Forgery Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-3477","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3477","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"3477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zemanta","cpe5":"related_posts","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zemanta","cpe5":"related_posts","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zemanta","cpe5":"related_posts","cpe6":"1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3477","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zemanta","cpe5":"related_posts","cpe6":"1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"3477","vulnerable":"1","versionEndIncluding":"1.3.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"zemanta","cpe5":"related_posts","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T16:07:38.070Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"59840","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/59840"},{"name":"53321","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/53321"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://wordpress.org/plugins/related-posts-by-zemanta/changelog/"},{"name":"relatedposts-cve20133477-unspecified-csrf(84246)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/84246"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-05-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"44d08088-2bea-4760-83a6-1e9be26b15ab","shortName":"flexera"},"references":[{"name":"59840","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/59840"},{"name":"53321","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/53321"},{"tags":["x_refsource_CONFIRM"],"url":"http://wordpress.org/plugins/related-posts-by-zemanta/changelog/"},{"name":"relatedposts-cve20133477-unspecified-csrf(84246)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/84246"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"PSIRT-CNA@flexerasoftware.com","ID":"CVE-2013-3477","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"59840","refsource":"BID","url":"http://www.securityfocus.com/bid/59840"},{"name":"53321","refsource":"SECUNIA","url":"http://secunia.com/advisories/53321"},{"name":"http://wordpress.org/plugins/related-posts-by-zemanta/changelog/","refsource":"CONFIRM","url":"http://wordpress.org/plugins/related-posts-by-zemanta/changelog/"},{"name":"relatedposts-cve20133477-unspecified-csrf(84246)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/84246"}]}}}},"cveMetadata":{"assignerOrgId":"44d08088-2bea-4760-83a6-1e9be26b15ab","assignerShortName":"flexera","cveId":"CVE-2013-3477","datePublished":"2014-05-27T15:00:00.000Z","dateReserved":"2013-05-07T00:00:00.000Z","dateUpdated":"2024-08-06T16:07:38.070Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-05-27 14:55:10","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-352","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zemanta:related_posts:*:*:*:*:*:wordpress:*:*","versionEndIncluding":"1.3.1","matchCriteriaId":"56BB915F-CB91-493C-BDBD-0CA3C75EEFCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zemanta:related_posts:1.0:*:*:*:*:wordpress:*:*","matchCriteriaId":"D7774D9E-549A-4240-B5DA-98EA0C06127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zemanta:related_posts:1.1:*:*:*:*:wordpress:*:*","matchCriteriaId":"71E49B56-6FF5-4668-AF0F-47CD3B1D0D6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:zemanta:related_posts:1.2:*:*:*:*:wordpress:*:*","matchCriteriaId":"820277FA-4C3B-48CA-B19A-FB3914FE7D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:zemanta:related_posts:1.3:*:*:*:*:wordpress:*:*","matchCriteriaId":"3AE14921-E43A-4BA4-8444-12F209E68929"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"3477","Ordinal":"1","Title":"CVE-2013-3477","CVE":"CVE-2013-3477","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"3477","Ordinal":"1","NoteData":"Cross-site request forgery (CSRF) vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors.","Type":"Description","Title":"CVE-2013-3477"},{"CveYear":"2013","CveId":"3477","Ordinal":"2","NoteData":"2014-05-27","Type":"Other","Title":"Published"},{"CveYear":"2013","CveId":"3477","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}