plugin

Facebook Members Vulnerabilities

2 known security issues reported for the Facebook Members WordPress plugin. Most recent disclosed May 5, 2013.

1 high

Running Facebook Members on your site? Check whether your installed version is affected.

Social Friends [facebook-members] < 5.0.5 (closed)

unknown

[en] Cross-site request forgery (CSRF) vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.

Affected:: up to 5.0.5
Fixed in:: 5.0.5
Disclosed:: May 5, 2013

CVE-2013-2703 on NVD →

Facebook Members < 5.0.5 - Cross-Site Request Forgery

high

Cross-site request forgery (CSRF) vulnerability in the Facebook Members plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this plugin's settings.

CVSS:: 7.6
Affected:: up to 5.0.5
Fixed in:: 5.0.5
Disclosed:: Apr 22, 2013

CVE-2013-2703 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database