VULNERABILITY INTELLIGENCE
CVE-2008-4734
CVSS score7.5 HIGH
EPSS probability1.22%
CISA KEVNot currently listed
Published2008-10-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a request that sets the wpcr_hidden_form_input parameter.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)