{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"wordpress","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NAMG6BFD2CRQ0W6WH4A87R","modified_at":"2026-09-01T20:02:15.581712138Z","published_at":"2013-12-30T04:53:07.473Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2013-7233","https://security-tracker.debian.org/tracker/CVE-2013-7233"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2013-7233#Debian:14/wordpress","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2013-7233"}],"summary":"Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of ad"}