CVE-2014-9340

CVE-2014-9340 affects the WordPress wpCommentTwit plugin (versions ≤ 0.5). It describes CSRF combined with XSS that allows an attacker to hijack an administrator’s session by abusing the username/password parameters in wpCommentTwit.php to access wp-admin/options-general.php. Exploitation details...

WordPress wpCommentTwit 0.5 CSRF / XSS

Title: CSRF/XSS Vulnerability in wpCommentTwit WP Plugin Author: Manideep K CVE-ID: CVE-2014-9340 Plugin Homepage: https://wordpress.org/plugins/wpcommenttwit/ Version Affected: 0.5 probably lower versions Severity: High About Plugin: wpCommentTwit is a plugin that will notify you of a new commen...