CVE-2014-2559

Currently unrated

Key Information:

Vendor
Wordpress
Status
Twitget
Vendor
CVE Published:
17 October 2014

Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change unspecified plugin options via a request to wp-admin/options-general.php.

References

http://wordpress.org/plugins/twitget/changelog
x_refsource_CONFIRM
http://secunia.com/advisories/57892
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/92391
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.