{ "schema_version": "1.4.0", "id": "GHSA-wwm8-q7mj-x5mp", "modified": "2025-04-11T04:12:46Z", "published": "2022-05-17T05:07:03Z", "aliases": [ "CVE-2013-3253" ], "details": "Cross-site request forgery (CSRF) vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-3253" }, { "type": "WEB", "url": "http://forum.xhanch.com/index.php/topic%2C3806.0.html" }, { "type": "WEB", "url": "http://forum.xhanch.com/index.php/topic,3806.0.html" }, { "type": "WEB", "url": "http://plugins.trac.wordpress.org/changeset/750054/xhanch-my-twitter" }, { "type": "WEB", "url": "http://secunia.com/advisories/53133" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/61629" } ], "database_specific": { "cwe_ids": [ "CWE-352" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2013-08-09T20:56:00Z" } }