CVE-2015-1614

CVE-2015-1614 pertains to the WordPress Image Metadata Cruncher plugin, which is reported to contain CSRF vulnerabilities that allow remote attackers to hijack an administrator’s authentication and trigger stored XSS via the plugin’s image_metadata_cruncher[alt], image_metadata_cruncher[caption],...