Lucene search
Tom AdamsPATCHSTACK:9B4E8272A66C4F7D5E16607F002A9B94HistoryApr 14, 2014 - 12:00 a.m.
WordPress Twitget Plugin 3.3.1 - Multiple Vulnerabilities
2014-04-1400:00:00
Tom Adams
patchstack.com
4
0.01 Low
EPSS
Percentile
83.3%
WordPress Twitget plugin is prone to multiple vulnerabilities, such as CSRF and XSS. It works when a logged-in administrator visits a specially crafted page. Then options can be updated without their consent and some of those options are output unescaped into the form (cross-site scripting).
Solution
Upgrade the plugin.
References
Related
packetstorm
packetstorm
Twitget 3.3.1 Cross Site Request Forgery / Cross Site Scripting
2014-04-11 00:00:00
seebug
seebug
Wordpress Twitget Plugin 3.3.1 - Multiple Vulnerabilities
2014-07-01 00:00:00
cve
cve
CVE-2014-2559
2014-10-17 22:55:04
zdt
zdt
Twitget 3.3.1 Cross Site Request Forgery / Cross Site Scripting
2014-04-12 00:00:00
exploitpack
exploitpack
WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities
2014-04-14 00:00:00
wpvulndb
wpvulndb
Twitget 3.3.1 - twitget.php Twitter Setting Manipulation CSRF
2014-08-01 10:59:13
prion
prion
Cross site request forgery (csrf)
2014-10-17 22:55:00
cvelist
cvelist
CVE-2014-2559
2014-10-17 22:00:00
nvd
nvd
CVE-2014-2559
2014-10-17 22:55:04
exploitdb
exploitdb
WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities
2014-04-14 00:00:00