WordPress Plugin Mobile Domain Has Multiple Cross-Site Request Forgery Vulnerabilities

Mobile Domain plugin is a desktop redirection plugin. The WordPress plugin Mobile Domain suffers from multiple cross-site request forgery vulnerabilities that allow remote attackers to hijack administrator request authentication...

CVE-2015-1581

Multiple cross-site request forgery CSRF vulnerabilities in the Mobile Domain plugin 1.5.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings or conduct cross-site scripting XSS attacks via the 2 domain, 3 text, 4 font, 5...

CVE-2015-1581

The CVE-2015-1581 entry concerns the WordPress Mobile Domain plugin (version 1.5.2) with multiple CSRF vulnerabilities that allow remote attackers to hijack administrator authentication for actions such as changing plugin settings and potentially enabling XSS via parameters like domain, text, fon...