WordPress FourSquare Checkins Plugin Cross Site Request Forgery Vulnerability

Bugtraq ID:	59354
Class:	Input Validation Error
CVE:	CVE-2013-2709
Remote:	Yes
Local:	No
Published:	Apr 22 2013 12:00AM
Updated:	Mar 19 2015 08:40AM
Credit:	Charlie Eriksen via Secunia.
Vulnerable:
Not Vulnerable:

WordPress FourSquare Checkins Plugin Cross Site Request Forgery Vulnerability

The FourSquare Checkins plugin for WordPress is prone to a cross-site request-forgery vulnerability because the application fails to properly validate HTTP requests.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.

FourSquare Checkins 1.2 is vulnerable; other versions may also be affected.

WordPress FourSquare Checkins Plugin Cross Site Request Forgery Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

WordPress FourSquare Checkins Plugin Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

WordPress FourSquare Checkins Plugin Cross Site Request Forgery Vulnerability

References:

• FourSquare Checkins Homepage (Crunchify)