EUVD-2014-9190

Malware in sbrugna...

WordPress Plugin TwitterDash Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site request forgery vulnerability exists in the WordPress plugin TwitterDash, which allows remote attackers to hijack the...

CVE-2014-9368

Cross-site request forgery CSRF vulnerability in the twitterDash plugin 2.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the usernametwitterDash parameter in the twitterDash.php page...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the twitterDash plugin 2.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the usernametwitterDash parameter in the twitterDash.php page...

CVE-2014-9368

Cross-site request forgery CSRF vulnerability in the twitterDash plugin 2.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the usernametwitterDash parameter in the twitterDash.php page...

CVE-2014-9368

Affected software: WordPress twitterDash plugin, version 2.1 and earlier. Vulnerability: CSRF that allows remote attackers to hijack administrator authentication and trigger stored XSS via the username_twitterDash parameter in twitterDash.php directing requests to wp-admin/options-general.php. Im...