CVE-2013-2109

WordPress plugin wp-cleanfix has Remote Code Execution

• CWE-352

• http://www.openwall.com/lists/oss-security/2013/05/18/11Exploit, Mailing List, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84434VDB Entry, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2013/05/18/11Exploit, Mailing List, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84434VDB Entry, Vendor Advisory

Published

Feb 10, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2103OpenShift cartridge allows remote URL retrieval8.1
• CVE-2013-2104python-keystoneclient before 0.2.4, as used in OpenStack Key…
• CVE-2013-2105The Show In Browser (show_in_browser) gem 0.0.3 for Ruby all…
• CVE-2013-2106webauth before 4.6.1 has authentication credential disclosur…7.5
• CVE-2013-2107Cross-site request forgery (CSRF) vulnerability in the Mail …
• CVE-2013-2108WordPress WP Cleanfix Plugin 2.4.4 has CSRF5.4
• CVE-2013-2110Heap-based buffer overflow in the php_quot_print_encode func…
• CVE-2013-2111The IMAP functionality in Dovecot before 2.2.2 allows remote…
• CVE-2013-2112The svnserve server in Subversion before 1.6.23 and 1.7.x be…
• CVE-2013-2113The create method in app/controllers/users_controller.rb in …
• CVE-2013-2114Unrestricted file upload vulnerability in the chunk upload A…
• CVE-2013-2115Apache Struts 2 before 2.3.14.2 allows remote attackers to e…8.1