WordPress Plugin Vulnerabilities

Yurl Retwitt <= 1.4 - Multiple CSRF

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
yurl-retwitt
No known fix

References

CVE
CVE-2014-9341
URL
https://packetstormsecurity.com/files/#129582/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
f7336204-40cb-4fe3-836c-eebeb7c75415

Timeline

Publicly Published
2014-12-14 (about 11 years ago)
Added
2019-08-22 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2026-03-18
Title
Add Custom Fields to Media < 2.0.4 - Cross-Site Request Forgery to Custom Field Deletion via 'delete' Parameter
Published
2025-09-29
Title
LatePoint < 5.2.0 - Account Takeover via CSRF
Published
2023-11-14
Title
Welcart e-Commerce < 2.9.5 - Cross-Site Request Forgery
Published
2025-02-07
Title
WP All Import Pro < 4.9.8 - Cross-Site Request Forgery to Imported Content Deletion
Published
2025-02-11
Title
Filled In < 1.9.3 - Stored XSS via CSRF