WordPress TweetScribe 1.1 CSRF / XSS

WordPress TweetScribe plugin version 1.1 suffers from cross site request forgery and cross site scripting vulnerabilities.