Description

Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote attackers to hijack the authentication of arbitrary users for requests that reset passwords.

Remediation

References

CVE-2014-9033

Related Vulnerabilities

Python Cryptographic Issues Vulnerability (CVE-2013-7040)

WordPress Plugin LayerSlider Multiple Vulnerabilities (6.2.0)

Moodle Improper Input Validation Vulnerability (CVE-2020-10738)

Oracle Database Server Other Vulnerability (CVE-2005-3445)

Joomla! Core 2.5.x Remote File Inclusion (2.5.4 - 2.5.25)

Severity

Medium

Classification

CVE-2014-9033 CWE-352

Tags

Missing Update Known Vulnerabilities