CVE-2014-4030
Published Jun 25, 2014
Last updated 10 years ago
Overview
- Description
- Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-352
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:*:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "A7736695-BFC9-4252-A7CB-9D1A2A895353",
"versionEndIncluding": "2.1.3"
},
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:2.0.0:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "5B9EB6B4-3CFE-4C9C-90B8-B25F0B6E630C"
},
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:2.0.1:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "DCE288A9-7892-4092-B352-92A48E925F18"
},
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:2.0.2:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "6138AB12-290D-40C3-AC44-0AD528CBF571"
},
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:2.0.3:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "65AEDEE6-5466-4E19-842D-0C0B12BE36B1"
},
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:2.0.4:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "66D02605-92D7-47D1-9734-EEAD93A80D66"
},
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:2.0.5:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "E1B922D8-1BE8-4E47-A7DD-40515D6BA502"
},
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:2.1.0:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "C25C8088-1BBC-4E7F-9FBC-BE88836A4F0D"
},
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:2.1.1:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "DC2D48F5-593F-4F26-985C-F6BA8B55A8EF"
},
{
"criteria": "cpe:2.3:a:longtailvideo:jw_player_for_flash_\\&_html5_video_plugin:2.1.2:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "56216A06-2876-4F63-A113-1CD03C8ED42C"
}
],
"operator": "OR"
}
]
}
]