Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
Wpcommenttwit ProjectWpcommenttwit

1 matches found

CVE
CVE•added 2014/12/19 3:0 p.m.•38 views

CVE-2014-9340

CVE-2014-9340 affects the WordPress wpCommentTwit plugin (versions ≤ 0.5). It describes CSRF combined with XSS that allows an attacker to hijack an administrator’s session by abusing the username/password parameters in wpCommentTwit.php to access wp-admin/options-general.php. Exploitation details...

6.8CVSS6.9AI score0.01001EPSS