CVE-2014-9525: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Timed Popup wp-timed-popup plugin 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change plugin settings via unspecified vectors or 2 conduct cross-site scripting XSS attack...

Timed Popup <= 1.3 - CSRF & Stored XSS

The wp-timed-popup WordPress plugin was affected by a CSRF & Stored XSS security vulnerability...