Description

WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie.

Remediation

References

CVE-2016-5838

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2016-4538)

WordPress Plugin Welcart e-Commerce Cross-Site Scripting (2.2.3)

Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-1623)

Dotclear Other Vulnerability (CVE-2005-3957)

Sqlite Out-of-bounds Write Vulnerability (CVE-2020-15358)

Severity

High

Classification

CVE-2016-5838 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities