WordPress O2Tweet 0.0.4 CSRF / XSS

WordPress O2Tweet plugin version 0.0.4 suffers from cross site request forgery and cross site scripting vulnerabilities.