EUVD-2014-3017

Malware in sbrugna...

EUVD-2014-2594

Malware in sbrugna...

CVE-2014-2559

Multiple cross-site request forgery CSRF vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change unspecified plugin options via a request to wp-admin/options-general.php...

CVE-2014-2995

Multiple cross-site scripting XSS vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitgetconsumerkey parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitgetconsumerkey parameter to...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change unspecified plugin options via a request to wp-admin/options-general.php...

CVE-2014-2995

Multiple cross-site scripting XSS vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitgetconsumerkey parameter to...

CVE-2014-2559

Multiple cross-site request forgery CSRF vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change unspecified plugin options via a request to wp-admin/options-general.php...

CVE-2014-2559

Summary (CVE-2014-2559): The Twitget WordPress plugin (before 3.3.3) is affected by multiple vulnerabilities, including CSRF (and related XSS in some disclosures) in twitget.php. A logged-in administrator can be tricked to perform unauthorized changes via requests to wp-admin/options-general.php,...

CVE-2014-2995

The CVE-2014-2995 issue affects the WordPress Twitget plugin prior to version 3.3.3, where twitget.php is vulnerable to cross-site scripting (XSS) via the twitget_consumer_key parameter used in wp-admin/options-general.php. Authorized WordPress administrators can inject arbitrary script/HTML due ...

Twitget 3.3.1 - twitget.php Twitter Setting Manipulation CSRF

The Twitget WordPress plugin was affected by a twitget.php Twitter Setting Manipulation CSRF security vulnerability...

Twitget 3.3.1 - twitget.php twitget_consumer_key Stored XSS

The Twitget WordPress plugin was affected by a twitget.php twitgetconsumerkey Stored XSS security vulnerability...

Wordpress Twitget Plugin 3.3.1 - Multiple Vulnerabilities

No description provided by source. Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A:N Description ================ CSRF/XSS vulnerability in Twitget 3.3...

WordPress Twitget Plugin <= 3.3.2 - Multiple XSS

Because of these vulnerabilities in twitget.php, authenticated administrators can inject arbitrary web script or HTML via unspecified vectors. Solution Update the plugin...

WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities

Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A:N Description ================ CSRF/XSS vulnerability in Twitget 3.3.1 Vulnerability ================ I...

WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities

WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A:N Description ================ CSRF/XSS...

WordPress Twitget Plugin 3.3.1 - Multiple Vulnerabilities

WordPress Twitget plugin is prone to multiple vulnerabilities, such as CSRF and XSS. It works when a logged-in administrator visits a specially crafted page. Then options can be updated without their consent and some of those options are output unescaped into the form cross-site scripting. Soluti...

Twitget 3.3.1 Cross Site Request Forgery / Cross Site Scripting

Twitget version 3.3.1 suffers from cross site request forgery and cross site scripting vulnerabilities. Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A...

Twitget 3.3.1 Cross Site Request Forgery / Cross Site Scripting

Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A:N Description ================ CSRF/XSS vulnerability in Twitget 3.3.1 Vulnerability ================ I...