CVE-2014-9397: Cross-site request forgery (CSRF) vulnerability in the twimp-wp plugin for WordPress allows remote attacker...

Security readout for executives and security teams

This issue affects the twimp-wp WordPress plugin. A logged-in administrator could be tricked into changing plugin settings in a way that adds cross-site scripting content. The source bundle does not name affected versions, a patch, or active exploitation, so urgency depends on whether the plugin exists in your environment. Exposure is likely limited to WordPress sites with the twimp-wp plugin installed and administrator accounts using authenticated sessions. The bundle does not establish affected versions or prevalence. Treat this as a targeted WordPress plugin risk. Prioritize confirmation and removal if present, especially on externally managed or legacy WordPress sites. Mitigation focus: Inventory WordPress sites for the twimp-wp plugin.; Disable or remove twimp-wp if it is unused.; Check vendor or plugin repository guidance for fixed versions..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.