Description

The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.

Remediation

References

CVE-2014-0166

Related Vulnerabilities

Oracle JRE CVE-2023-22044 Vulnerability (CVE-2023-22044)

Oracle JRE CVE-2013-2473 Vulnerability (CVE-2013-2473)

Perl Out-of-bounds Write Vulnerability (CVE-2022-48522)

MediaWiki CVE-2020-25813 Vulnerability (CVE-2020-25813)

WordPress 2.0.1 Denial of Service Vulnerability (0.6.2 - 2.0.1)

Severity

Medium

Classification

CVE-2014-0166 CWE-287

Tags

Missing Update Known Vulnerabilities