Description

WordPress Plugin WP to Twitter is prone to an authorization bypass vulnerability. Attackers can exploit this vulnerability to perform otherwise restricted actions and subsequently post tweets to the admin's twitter account. WordPress Plugin WP to Twitter version 2.9.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.9.4 or latest

References

https://vexatioustendencies.com/wordpress-plugin-vulnerability-dump-part-2/

http://www.securityfocus.com/bid/69741/exploit

Related Vulnerabilities

Oracle Application Server CVE-2009-0990 Vulnerability (CVE-2009-0990)

WordPress Plugin Estatik Real Estate Arbitrary File Upload (2.2.5)

Oracle Database Server CVE-2009-3412 Vulnerability (CVE-2009-3412)

MySQL CVE-2022-21599 Vulnerability (CVE-2022-21599)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1423)

Severity

High

Classification

CWE-264 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Authentication Bypass