What is CVE-2014-9400?

CVE-2014-9400 is a vulnerability in Wp Unique Article Header Image Project, classified under Cross-Site Request Forgery (CSRF). Published 2014-12-31.

Is CVE-2014-9400 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Wp Unique Article Header Image Project

CVE-2014-9400

Multiple cross-site request forgery (CSRF) vulnerabilities in the Wp Unique Article Header Image plugin 1.0 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) gt_default_header or (2) gt_homepage_header parameter in the wp-unique-header.php page to wp-admin/options-general.php.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.010 (59.7th percentile) — read the EPSS interpretation.

Affected products

Wp_unique_article_header_image_project Wp_unique_article_header_image
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-9400?: CVE-2014-9400 is a vulnerability in Wp Unique Article Header Image Project, classified under Cross-Site Request Forgery (CSRF). Published 2014-12-31.
Is CVE-2014-9400 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.