WP Admin Microblog Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WP Admin Microblog plugin for WordPress, affecting all versions through 3.1.1. The vulnerability arises from inadequate nonce validation on the 'wp-admin-microblog' page, allowing unauthenticated attackers to send messages on behalf of an administrator. Exploitation requires tricking the site administrator into clicking a link that initiates the forged request.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, where an attacker can perform actions on behalf of an administrator, such as sending messages, without the administrator's consent or knowledge.

Remediation

There is no known patch available for this vulnerability. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.