WordPress Plugin Vulnerabilities

O2tweet <= 0.0.4 - Multiple CSRF

Description

Plugin is still affected and has been closed

Affects Plugins

Plugin icon
o2tweet
No known fix

References

CVE
CVE-2014-9338
URL
https://packetstormsecurity.com/files/#129578/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
87c61067-d2d4-489e-8bba-0ac340d018e2

Timeline

Publicly Published
2014-12-15 (about 11 years ago)
Added
2019-08-22 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2025-06-05
Title
Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant < 4.1.2 - Cross-Site Request Forgery
Published
2023-10-18
Title
Internal Link Building <= 1.2.3 - CSRF
Published
2023-06-26
Title
AutomateWoo < 5.7.6 - Cross-Site Request Forgery
Published
2024-07-12
Title
Matomo Analytics < 5.1.1 - Cross-Site Request Forgery to Notice Dismissal
Published
2023-02-21
Title
Minify HTML <= 2.1.7 - Settings Update via CSRF