CVE-2014-9395

CVE-2014-9395 affects the WordPress Simplelife plugin (versions 1.2 and earlier). The vulnerability set comprises multiple CSRF flaws that allow remote attackers to hijack administrator authentication for requests that trigger XSS via parameters in simplelife.php (notably simplehoverback, simpleh...