CVE-2014-9339

CVE-2014-9339 affects the WordPress SPNbabble plugin (versions up to and including 1.4.1). The vulnerability is a CSRF flaw that can allow an attacker to hijack an administrator’s authentication for requests that trigger XSS, via the username or password parameters in spnbabble.php leading to wp-...