WordPress Twitter LiveBlog plugin version 1.1.2 suffers from cross site request forgery and cross site scripting vulnerabilities.