CVE-2014-9454 | BDVDB-2026-67124 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Sticky Footer plugin before 1.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS) attacks via the (2) simple_sf_width or (3) simple_sf_style parameter in the simple-simple-sticky-footer page to wp-admin/themes.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/99374
http://packetstormsecurity.com/files/129503/WordPress-Simple-Sticky-Footer-1.3.2-CSRF-XSS.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/99375
https://wordpress.org/plugins/simple-sticky-footer/changelog/

Exploit#

No public exploit known

History#

Version 12015-01-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.