Mandriva Linux Security Advisory 2014-233 – An updated wordpress package fixes cross site scripting, cross site request forgery, and various other vulnerabilities.