CVE-2014-9393: Multiple cross-site request forgery (CSRF) vulnerabilities in the Post to Twitter plugin 0.7 and earlier fo...

Security readout for executives and security teams

This is an old WordPress plugin issue. If a site runs Post to Twitter 0.7 or earlier, an attacker could abuse an authenticated administrator’s browser to change plugin settings in a way that introduces cross-site scripting. The source bundle does not provide a CVSS score, patch version, or evidence of active exploitation. Exposure appears limited to WordPress installations with the Post to Twitter plugin version 0.7 or earlier installed, especially where administrators use active authenticated sessions. The provided affected-product metadata is incomplete, so validate against plugin inventory rather than product names alone. Treat this as a targeted legacy-plugin cleanup item, not an internet-wide emergency based on current evidence. Prioritize sites that still run the plugin, especially externally managed or business-critical WordPress properties. Mitigation focus: Inventory WordPress sites for Post to Twitter plugin version 0.7 or earlier.; Disable or remove the plugin if it is no longer required.; Check plugin or WordPress vendor guidance for any fixed replacement version..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.