medium6.8
CVE-2014-9394
Multiple cross-site request forgery (CSRF) vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authenti…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) pwgrandom_title or (2) pwgrandom_category parameter in the pwgrandom page to wp-admin/options-general.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pwgrandom Project | Pwgrandom | through 1.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/129640/WordPress-PWG-Random-1.11-CSRF-XSS.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99437
- http://packetstormsecurity.com/files/129640/WordPress-PWG-Random-1.11-CSRF-XSS.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99437