CVE-2012-10015

Summary

A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttr_settings_page of the file twitter.php of the component Settings Page. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Upgrading to version 2.15 is able to address this issue. The patch is identified as a6d4659cbb2cbf18ccb0fb43549d5113d74e0146. It is recommended to upgrade the affected component. VDB-230154 is the identifier assigned to this vulnerability.

Affected Software

VendorProductVersion RangeStatus
BestWebSoftTwitter Plugin2.0affected
BestWebSoftTwitter Plugin2.1affected
BestWebSoftTwitter Plugin2.2affected
BestWebSoftTwitter Plugin2.3affected
BestWebSoftTwitter Plugin2.4affected
BestWebSoftTwitter Plugin2.5affected
BestWebSoftTwitter Plugin2.6affected
BestWebSoftTwitter Plugin2.7affected
BestWebSoftTwitter Plugin2.8affected
BestWebSoftTwitter Plugin2.9affected
BestWebSoftTwitter Plugin2.10affected
BestWebSoftTwitter Plugin2.11affected
BestWebSoftTwitter Plugin2.12affected
BestWebSoftTwitter Plugin2.13affected
BestWebSoftTwitter Plugin2.14affected

Weaknesses

  • CWE-352: CWE-352 Cross-Site Request Forgery

ADP Enrichment

CVE Program Container

Additional References

References