Description
In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.12, and 4.2.x before 4.2.7, a vulnerability would allow an attacker to authenticate as a privileged user on sites with user registration and remember me login functionality enabled. This is related to symfony/security.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP eCommerce 'wpsc-transaction_results_functions.php' SQL Injection (3.8.7.5)
WordPress Plugin Simply Static Multiple Vulnerabilities (1.7.0)
WordPress Plugin Testimonial Cross-Site Scripting (1.5.9)
WordPress Plugin YITH WooCommerce Questions and Answers Security Bypass (1.1.9)
Zope Web Application Server Other Vulnerability (CVE-2007-0240)