Lucene search
Manideep KPATCHSTACK:B42EA48EC84F06483AB0FDD38514E536HistoryDec 07, 2014 - 12:00 a.m.
WordPress iTwitter Plugin <= 0.04 - Multiple CSRF and XSS
2014-12-0700:00:00
Manideep K
patchstack.com
7
EPSS
0.002
Percentile
61.4%
Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks.
Solution
This plugin is closed.
Related
vulnerlab
vulnerlab
iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability
2014-12-15 00:00:00
iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability
2014-12-15 00:00:00
nvd
nvd
CVE-2014-9336
2014-12-19 15:59:20
cvelist
cvelist
CVE-2014-9336
2014-12-19 15:00:00
wpvulndb
wpvulndb
iTwitter <= 0.04 - XSS & CSRF
2014-12-19 21:07:40
packetstorm
packetstorm
WordPress iTwitter 0.04 Cross Site Request Forgery / Cross Site Scripting
2014-12-18 00:00:00
WordPress iTwitter WP 0.04 CSRF / XSS
2014-12-14 00:00:00
securityvulns
securityvulns
iTwitter v0.04 WP Plugin - XSS & CSRF Web Vulnerability
2014-12-22 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-12-19 15:59:00
cve
cve
CVE-2014-9336
2014-12-19 15:59:20