Cross-Site Request Forgery Vulnerability in WhyDoWork AdSense Plugin for WordPress
CVE-2014-9099

Currently unrated

Key Information:

Vendor

Wordpress
Status
Whydowork Adsense
Vendor
CVE Published:
26 November 2014

What is CVE-2014-9099?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WhyDoWork AdSense plugin version 1.2 for WordPress. This flaw allows remote attackers to exploit administrator sessions by sending harmful requests to the admin panel. The attack is executed through an unauthorized request directed at the whydowork_adsense page within the wp-admin/options-general.php area, potentially leading to session hijacking and unauthorized actions being performed on behalf of the administrator.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/bid/68954
vdb-entryx_refsource_BID
http://packetstormsecurity.com/files/127658/WordPress-Why...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.