CVE-2013-7233: WordPress

Medium severity, CVSS 6.8. EPSS: 3.8% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of administrators for requests that move comments to the moderation list.

Affected products

• WordPress WordPress: up to and including 2.0.11; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.4 only; version 2.0.5 only; …

Published 2013-12-30. Last modified 2026-06-17.