Description
Cross-site request forgery (CSRF) vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors.
References
- 93096 vdb-entry
- 53127 third-party-advisory
- http://wordpress.org/plugins/wp-postviews/changelog