Description

WordPress is prone to a vulnerability that allows an attacker to gain unauthorized access to the affected application. An attacker can exploit this issue to gain administrative access to the application, which can result in total compromise of the affected application. WordPress versions prior to 2.5.1 are vulnerable.

Remediation

Update to WordPress version 2.5.1 or latest

References

http://www.cl.cam.ac.uk/~sjm217/advisories/wordpress-cookie-integrity.txt

http://www.securityfocus.com/archive/1/491356

http://core.trac.wordpress.org/ticket/5367

http://secunia.com/advisories/29965/

Related Vulnerabilities

Moodle Other Vulnerability (CVE-2023-5550)

Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11587)

WordPress Plugin WooCommerce Conversion Tracking Cross-Site Request Forgery (2.0.4)

Oracle Application Server CVE-2006-0284 Vulnerability (CVE-2006-0284)

Dotclear Improper Authentication Vulnerability (CVE-2014-3781)

Severity

High

Classification

CVE-2008-1930 CWE-287 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update