What is CVE-2014-9401?

CVE-2014-9401 is a vulnerability in Wp Limit Posts Automatically Project, classified under Cross-Site Request Forgery (CSRF). Published 2014-12-31.

Is CVE-2014-9401 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Wp Limit Posts Automatically Project

CVE-2014-9401

Cross-site request forgery (CSRF) vulnerability in the WP Limit Posts Automatically plugin 0.7 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the lpa_post_letters parameter in the wp-limit-posts-automatically.php page to wp-admin/options-general.php.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.010 (59.7th percentile) — read the EPSS interpretation.

Affected products

Wp_limit_posts_automatically_project Wp_limit_posts_automatically
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2014-9401?: CVE-2014-9401 is a vulnerability in Wp Limit Posts Automatically Project, classified under Cross-Site Request Forgery (CSRF). Published 2014-12-31.
Is CVE-2014-9401 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.