Description
WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.
Remediation
References
Related Vulnerabilities
Chamilo Improper Input Validation Vulnerability (CVE-2012-4030)
Osclass Other Vulnerability (CVE-2014-8085)
Drupal Core 9.3.x Cross-Site Scripting (9.3.0 - 9.3.18)
WordPress Plugin WooCommerce Smart Coupons Security Bypass (4.6.0)
WordPress Plugin Sendit WP Newsletter 'submit.php' Blind SQL Injection (1.5.9)