TI-2014-07747 CVE-2014-9525 · GHSA-8fr7-w8x4-gvvqMultiple cross-site request forgery (CSRF) vulnerabilities in the Timed Popup…Priority LOW 32Multiple cross-site request forgery (CSRF) vulnerabilities in the Timed Popup (wp-timed-popup) plugin 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change p…CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01151 · Published 2015-01-05 · No fix listed CWE-352