CVE-2013-1409

MEDIUM 4.3CVE-2013-1409 · Published 03/03/2014 · updated 16/06/2026

In short

CVE-2013-1409 is a MEDIUM (CVSS 4.3) vulnerability affecting commentluv (commentluv).
Chance of exploitation in the next 30 days (EPSS): 4.5%, higher than 91.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
commentluv commentluv	`= 2.7= 2.71= 2.74= 2.76= 2.761= 2.762= 2.763= 2.764= 2.765= 2.766= 2.767= 2.768= 2.769= 2.7691= 2.80= 2.81= 2.81.1= 2.81.2= 2.81.3= 2.81.4= 2.81.5= 2.81.6= 2.81.7= 2.81.8= 2.90.1= 2.90.3= 2.90.5= 2.90.6= 2.90.7= 2.90.8= 2.90.8.1= 2.90.8.2= 2.90.8.3= 2.90.9= 2.90.9.1= 2.90.9.2= 2.90.9.3= 2.90.9.4= 2.90.9.5= 2.90.9.6= 2.90.9.7= 2.90.9.8= 2.90.9.9= 2.90.9.9.1= 2.90.9.9.2= 2.90.9.9.3= 2.91= 2.91.1= 2.92= 2.92.1= 2.92.2≤ 2.92.3`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _ajax_nonce parameter to wp-admin/admin-ajax.php.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free