CVE-2014-9099

Cross-site request forgery (CSRF) vulnerability in the WhyDoWork AdSense plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the whydowork_adsense page in wp-admin/options-general.php.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.69% chance of exploitation in the next 30 days, 85th percentile

Published

2014-11-26

Updated

2024-09-17

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/39270

References

• CVE Record
• NVD entry

Related

• CVE-2014-9098
• CVE-2014-9101
• CVE-2014-9097
• CVE-2014-9112
• CVE-2014-9096
• CVE-2014-9113