EUVD-2014-9163

Malware in sbrugna...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the O2Tweet plugin 0.0.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 o2tusername or 2 o2ttags parameter to...

CVE-2014-9338

Multiple cross-site request forgery CSRF vulnerabilities in the O2Tweet plugin 0.0.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 o2tusername or 2 o2ttags parameter to...

O2tweet <= 0.0.4 - Multiple CSRF

Plugin is still affected and has been closed...