WordPress Plugin PWGRandom Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their own weblogs on servers that support PHP and MySQL databases.PWGRandom plugin is a plugin that supports the random display of images from the PhpWebGallery. The WordPress plugin PWGRandom suffers fr...

CVE-2014-9394

Multiple cross-site request forgery CSRF vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 pwgrandomtitle or 2 pwgrandomcategory paramete...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 pwgrandomtitle or 2 pwgrandomcategory paramete...

CVE-2014-9394

CVE-2014-9394 concerns the WordPress PWGRandom plugin (version ≤ 1.11). The connected documents describe multiple CSRF vulnerabilities that enable an attacker to hijack an administrator’s authentication for requests that execute cross-site scripting (XSS) via parameters pwgrandom_title and pwgran...