CVE-2014-9393

The CVE-2014-9393 entry concerns the WordPress Post to Twitter plugin (version 0.7 and earlier). Affected component: the plugin’s admin options page handling (wp-admin/options-general.php) where CSRF allows an attacker to hijack administrator authentication and trigger XSS via parameters idptt_tw...