Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin TinyMCE Color Picker Multiple Vulnerabilities - CVE-2014-3845 - Vulnerability Database
WP Plugin Tinymce Colorpicker

WordPress Plugin TinyMCE Color Picker Multiple Vulnerabilities - CVE-2014-3845

Medium
Reference: CVE-2014-3845
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-3845
Title: WordPress Plugin TinyMCE Color Picker Multiple Vulnerabilities
Overview:

WordPress Plugin TinyMCE Color Picker is prone to multiple vulnerabilities including cross-site request forgery and security bypass vulnerabilities. Exploiting these issues may allow an attacker to perform otherwise restricted actions and subsequently e.g. manipulate plugin settings. WordPress Plugin TinyMCE Color Picker version 1.1 is vulnerable.