Lucene search
Manideep KPATCHSTACK:604375CF8115817F3D8E66D86EC6D191HistoryDec 07, 2014 - 12:00 a.m.
WordPress yURL ReTwitt Plugin <= 1.4 - Multiple CSRF and XSS
2014-12-0700:00:00
Manideep K
patchstack.com
6
0.005 Low
EPSS
Percentile
76.2%
Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks.
Solution
This plugin is closed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp yurl retwitt | le | 1.4 |
Related
cve
cve
CVE-2014-9341
2014-12-19 15:59:24
packetstorm
packetstorm
WordPress yURL ReTwitt WP 1.4 CSRF / XSS
2014-12-14 00:00:00
cvelist
cvelist
CVE-2014-9341
2014-12-19 15:00:00
nvd
nvd
CVE-2014-9341
2014-12-19 15:59:24
prion
prion
Cross site request forgery (csrf)
2014-12-19 15:59:00