CVE-2013-2008

MediumCVSS 6.1/10Last modified Jun 16, 2026

Description

WordPress Super Cache Plugin 1.3 has XSS.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Super Cache Plugin authors	Super Cache Plugin	1.3 (fixed in 1.3.1)

References

http://www.openwall.com/lists/oss-security/2013/04/24/10Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/04/24/8Mailing List, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/83798Third Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2013/04/24/10Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/04/24/8Mailing List, Patch, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/83798Third Party Advisory, VDB Entry

Timeline

Published: Feb 7, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-20098.8WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution CVE-2013-20109.8WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability CVE-2013-20118.8WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitr CVE-2013-20127.3autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custom_install directory in the current working directory.CVE-2013-20132.1The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows loc CVE-2013-20145.0OpenStack Identity (Keystone) before 2013.1 allows remote attackers to cause a denial of service (memory consumption and crash) via multiple CVE-2013-20154.7The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journa CVE-2013-20167.8A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. CVE-2013-20177.8The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remot CVE-2013-20189.8Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2013-20199.3Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 allows remote attackers to have unspecified impact via multiple file_signature elem CVE-2013-20205.0Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) vi