CVE-2014-5199 – WordPress File Upload < 2.4.2 - Cross-Site Request Forgery

https://notcve.org/view.php?id=CVE-2014-5199

08 Aug 2014 — Cross-site request forgery (CSRF) vulnerability in the WordPress File Upload plugin (wp-file-upload) before 2.4.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information. Vulnerabilidad de CSRF en el plugin WordPress File Upload (wp-file-upload) anterior a 2.4.2 para WordPress permite a atacantes remotos secuestrar la autenticación de administra... • http://secunia.com/advisories/60520 • CWE-352: Cross-Site Request Forgery (CSRF) •