Description

The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.

Remediation

References

CVE-2014-0166

Related Vulnerabilities

MySQL CVE-2022-21264 Vulnerability (CVE-2022-21264)

MySQL CVE-2013-3809 Vulnerability (CVE-2013-3809)

Drupal Core 9.2.x Multiple Security Bypass Vulnerabilities (9.2.0 - 9.2.5)

AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14863)

Oracle JRE CVE-2013-2417 Vulnerability (CVE-2013-2417)

Severity

Medium

Classification

CVE-2014-0166 CWE-287

Tags

Missing Update Known Vulnerabilities