Multiple Cross-Site Request Forgery Vulnerabilities in WP-ViperGB Plugin for WordPress
CVE-2014-9460
What is CVE-2014-9460?
The WP-ViperGB plugin for WordPress prior to version 1.3.11 is vulnerable to multiple cross-site request forgery (CSRF) attacks. These vulnerabilities allow unauthorized remote attackers to exploit the plugin and hijack administrator authentication. Attackers can manipulate plugin settings through unspecified vectors, enabling the potential for cross-site scripting (XSS) attacks via the 'vgb_page' or 'vgb_items_per_pg' parameters on the wp-vipergb page within the wp-admin/options-general.php interface. Proper validation and sanitization measures are essential to alleviate these security risks.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.