Unrated severityNVD Advisory· Published Dec 19, 2014· Updated Jun 17, 2026

CVE-2014-9338

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the O2Tweet plugin 0.0.4 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) o2t_username or (2) o2t_tags parameter to wp-admin/options-general.php.

Affected products

O2tweet Project/O2tweet
cpe:2.3:a:o2tweet_project:o2tweet:*:*:*:*:*:wordpress:*:*
Range: <=0.0.4
WordPress/O2Tweetllm-create
Range: <=0.0.4

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/129578/WordPress-O2Tweet-0.0.4-CSRF-XSS.htmlnvdExploit

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000