Read the docs
TI-2013-00621 Aliases CVE-2013-0736GHSA-8rpm-fcr4-3p6p

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin…

Priority LOW 32CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Tampering
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) modify user privileges or (2) conduct cross-site scripting (XSS) attacks via unspecified vectors.

Why it matters now

EPSS 0.01058 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 46

CPEVersionsRoleVendor
cpe:2.3:a:cartpauj:mingle-forum:*:*:*:*:*:*:*:*up to 1.0.34Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.00:*:*:*:*:*:*:*1.0.00Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.01:*:*:*:*:*:*:*1.0.01Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.02:*:*:*:*:*:*:*1.0.02Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.03:*:*:*:*:*:*:*1.0.03Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.04:*:*:*:*:*:*:*1.0.04Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.05:*:*:*:*:*:*:*1.0.05Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.06:*:*:*:*:*:*:*1.0.06Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.07:*:*:*:*:*:*:*1.0.07Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.08:*:*:*:*:*:*:*1.0.08Vulnerablecartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:*:*:*:*:*:*:*:* Versions up to 1.0.34 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.00:*:*:*:*:*:*:* Versions 1.0.00 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.01:*:*:*:*:*:*:* Versions 1.0.01 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.02:*:*:*:*:*:*:* Versions 1.0.02 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.03:*:*:*:*:*:*:* Versions 1.0.03 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.04:*:*:*:*:*:*:* Versions 1.0.04 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.05:*:*:*:*:*:*:* Versions 1.0.05 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.06:*:*:*:*:*:*:* Versions 1.0.06 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.07:*:*:*:*:*:*:* Versions 1.0.07 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.08:*:*:*:*:*:*:* Versions 1.0.08 Vulnerable ·cartpauj
Show 36 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cartpauj:mingle-forum:1.0.09:*:*:*:*:*:*:*1.0.09Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.10:*:*:*:*:*:*:*1.0.10Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.11:*:*:*:*:*:*:*1.0.11Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.12:*:*:*:*:*:*:*1.0.12Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.13:*:*:*:*:*:*:*1.0.13Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.14:*:*:*:*:*:*:*1.0.14Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.15:*:*:*:*:*:*:*1.0.15Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.16:*:*:*:*:*:*:*1.0.16Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.17:*:*:*:*:*:*:*1.0.17Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.18:*:*:*:*:*:*:*1.0.18Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.19:*:*:*:*:*:*:*1.0.19Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.20:*:*:*:*:*:*:*1.0.20Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.21:*:*:*:*:*:*:*1.0.21Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.21.1:*:*:*:*:*:*:*1.0.21.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.22:*:*:*:*:*:*:*1.0.22Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.23:*:*:*:*:*:*:*1.0.23Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.23.1:*:*:*:*:*:*:*1.0.23.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.23.2:*:*:*:*:*:*:*1.0.23.2Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.24:*:*:*:*:*:*:*1.0.24Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.25:*:*:*:*:*:*:*1.0.25Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.26:*:*:*:*:*:*:*1.0.26Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.27:*:*:*:*:*:*:*1.0.27Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.28:*:*:*:*:*:*:*1.0.28Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.28.1:*:*:*:*:*:*:*1.0.28.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.28.2:*:*:*:*:*:*:*1.0.28.2Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.29:*:*:*:*:*:*:*1.0.29Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.30:*:*:*:*:*:*:*1.0.30Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31:*:*:*:*:*:*:*1.0.31Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31.1:*:*:*:*:*:*:*1.0.31.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31.2:*:*:*:*:*:*:*1.0.31.2Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31.3:*:*:*:*:*:*:*1.0.31.3Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.31.4:*:*:*:*:*:*:*1.0.31.4Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.32:*:*:*:*:*:*:*1.0.32Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.32.1:*:*:*:*:*:*:*1.0.32.1Vulnerablecartpauj
cpe:2.3:a:cartpauj:mingle-forum:1.0.33:*:*:*:*:*:*:*1.0.33Vulnerablecartpauj
cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*not specified by NVDRunning onWordPress
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.09:*:*:*:*:*:*:* Versions 1.0.09 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.10:*:*:*:*:*:*:* Versions 1.0.10 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.13:*:*:*:*:*:*:* Versions 1.0.13 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.14:*:*:*:*:*:*:* Versions 1.0.14 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.15:*:*:*:*:*:*:* Versions 1.0.15 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.16:*:*:*:*:*:*:* Versions 1.0.16 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.17:*:*:*:*:*:*:* Versions 1.0.17 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.18:*:*:*:*:*:*:* Versions 1.0.18 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.19:*:*:*:*:*:*:* Versions 1.0.19 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.20:*:*:*:*:*:*:* Versions 1.0.20 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.21:*:*:*:*:*:*:* Versions 1.0.21 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.21.1:*:*:*:*:*:*:* Versions 1.0.21.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.22:*:*:*:*:*:*:* Versions 1.0.22 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.23:*:*:*:*:*:*:* Versions 1.0.23 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.23.1:*:*:*:*:*:*:* Versions 1.0.23.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.23.2:*:*:*:*:*:*:* Versions 1.0.23.2 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.24:*:*:*:*:*:*:* Versions 1.0.24 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.25:*:*:*:*:*:*:* Versions 1.0.25 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.26:*:*:*:*:*:*:* Versions 1.0.26 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.27:*:*:*:*:*:*:* Versions 1.0.27 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.28:*:*:*:*:*:*:* Versions 1.0.28 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.28.1:*:*:*:*:*:*:* Versions 1.0.28.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.28.2:*:*:*:*:*:*:* Versions 1.0.28.2 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.29:*:*:*:*:*:*:* Versions 1.0.29 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.30:*:*:*:*:*:*:* Versions 1.0.30 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31:*:*:*:*:*:*:* Versions 1.0.31 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31.1:*:*:*:*:*:*:* Versions 1.0.31.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31.2:*:*:*:*:*:*:* Versions 1.0.31.2 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31.3:*:*:*:*:*:*:* Versions 1.0.31.3 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.31.4:*:*:*:*:*:*:* Versions 1.0.31.4 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.32:*:*:*:*:*:*:* Versions 1.0.32 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.32.1:*:*:*:*:*:*:* Versions 1.0.32.1 Vulnerable ·cartpauj
  • cpe:2.3:a:cartpauj:mingle-forum:1.0.33:*:*:*:*:*:*:* Versions 1.0.33 Vulnerable ·cartpauj
  • cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WordPress

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-0736
  2. 2026-10-03 Alias added: GHSA-8rpm-fcr4-3p6p

References

Other 1

  • TI-2013-00620 Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before… CVSS 2.0HIGH 7.5
  • TI-2012-04502 Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other… CVSS 2.0MEDIUM 6.5
  • TI-2012-04501 Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum… CVSS 2.0MEDIUM 6.5
  • TI-2013-00619 Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences