• WordPress Plugin Login rebuilder is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Login rebuilder version 1.1.3 is vulnerable; prior versions may also be affected.

• Update to plugin version 1.2.0 or latest

• • http://12net.jp/news/n20140623_01.html

• 

• CVE-2014-3882

• CWE-352

• CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

• Missing Update CSRF

• WordPress Plugin WP User Groups Cross-Site Request Forgery (2.0.0)
• WordPress Plugin WF Cookie Consent Cross-Site Scripting (1.1.3)
• WordPress Plugin Gravity Forms Cross-Site Scripting (2.0.6.5)
• Apache Tomcat directory traversal
• WordPress Plugin Form Manager Remote Command Execution (1.7.2)