WordPress Plugin PWGRandom Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.PWGRandom plugin is a plugin that supports the random display of images from the PhpWebGallery. The WordPress plugin PWGRandom suffers fr...

CVE-2014-9394

Multiple cross-site request forgery CSRF vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 pwgrandomtitle or 2 pwgrandomcategory paramete...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 pwgrandomtitle or 2 pwgrandomcategory paramete...

CVE-2014-9394

CVE-2014-9394 concerns the WordPress PWGRandom plugin (version ≤ 1.11). The connected documents describe multiple CSRF vulnerabilities that enable an attacker to hijack an administrator’s authentication for requests that execute cross-site scripting (XSS) via parameters pwgrandom_title and pwgran...

CVE-2014-9394: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 pwgrandomtitle or 2 pwgrandomcategory paramete...

PT-2014-8985

Name of the Vulnerable Software and Affected Versions WordPress PWGRandom plugin version 1.11 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the pwgrandom tit...