wordpress -- multiple vulnerabilitiesentered 2015-01-05
no CVE referenced
CVE details
CVE-2014-9033
Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote attackers to hijack the authentication of arbitrary users for requests that reset passwords.
- Score
- 6.8 medium
- Published
- 2014-11-25
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.