CVE-2014-9525: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Timed Popup wp-timed-popup plugin 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or 2 conduct cross-site scripting XSS attack...

PT-2015-4266

Name of the Vulnerable Software and Affected Versions wp-timed-popup plugin version 1.3 Description The issue allows remote attackers to hijack the authentication of administrators for requests, enabling them to change plugin settings or conduct cross-site scripting XSS attacks. The XSS attacks c...

Timed Popup <= 1.3 - CSRF & Stored XSS

The wp-timed-popup WordPress plugin was affected by a CSRF & Stored XSS security vulnerability...