PT-2014-8989

Name of the Vulnerable Software and Affected Versions Twitter LiveBlog plugin versions 1.1.2 and earlier for WordPress Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS...

PT-2014-8985

Name of the Vulnerable Software and Affected Versions WordPress PWGRandom plugin version 1.11 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the pwgrandom tit...

PT-2014-8983

Name of the Vulnerable Software and Affected Versions PictoBrowser plugin versions 0.3.1 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is...

PT-2014-8986

Name of the Vulnerable Software and Affected Versions Simplelife plugin versions 1.2 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the simplehoverback,...

CVE-2014-9394: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 pwgrandomtitle or 2 pwgrandomcategory paramete...

CVE-2014-9399: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the TweetScribe plugin 1.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the tweetscribeusername parameter in a save action in the...

CVE-2014-9401: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the WP Limit Posts Automatically plugin 0.7 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the lpapostletters parameter in the...

CVE-2014-9391: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the gSlideShow plugin 0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 rss, 2 displaytime or 3 transistiontime...

CVE-2014-9393: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Post to Twitter plugin 0.7 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 idptttwitterusername or 2 idptttweetprefi...

CVE-2014-9397: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the twimp-wp plugin for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the messageformat parameter in the twimp-wp.php page to...

CVE-2014-9392: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the PictoBrowser pictobrowser-gallery plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the pictoBrowserFlickrUser parameter ...

PT-2014-8984

Name of the Vulnerable Software and Affected Versions Post to Twitter plugin versions 0.7 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the idptt twitter...

PT-2014-8937

Name of the Vulnerable Software and Affected Versions Bird Feeder plugin version 1.2.3 Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the user or password parameter in th...

CVE-2014-9334: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 user or 2 password parameter in the bird-feeder page to...

PT-2014-8943

Name of the Vulnerable Software and Affected Versions wpCommentTwit plugin version 0.5 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the username or password...

PT-2014-8938

Name of the Vulnerable Software and Affected Versions DandyID Services plugin versions 1.5.9 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the email address ...

PT-2014-8941

Name of the Vulnerable Software and Affected Versions O2Tweet plugin versions 0.0.4 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the o2t username or o2t tag...

PT-2014-8944

Name of the Vulnerable Software and Affected Versions yURL ReTwitt plugin versions 1.4 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the yurl login or yurl...

PT-2014-8966

Name of the Vulnerable Software and Affected Versions twitterDash plugin versions 2.1 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved...

CVE-2014-9335: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the DandyID Services plugin 1.5.9 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 emailaddress or 2 sidebarTitle paramet...