CVE-2014-9454

The CVE-2014-9454 entry concerns the WordPress plugin Simple Sticky Footer (before version 1.3.3). Multiple CSRF vulnerabilities allow remote attackers to hijack administrator sessions and perform actions such as changing plugin settings, with additional potential XSS via the simple_sf_width and ...