Description

WordPress is prone to a vulnerability that allows an attacker to gain unauthorized access to the affected application. An attacker can exploit this issue to gain administrative access to the application, which can result in total compromise of the affected application. WordPress versions prior to 2.5.1 are vulnerable.

Remediation

Update to WordPress version 2.5.1 or latest

References

http://www.cl.cam.ac.uk/~sjm217/advisories/wordpress-cookie-integrity.txt

http://www.securityfocus.com/archive/1/491356

http://core.trac.wordpress.org/ticket/5367

http://secunia.com/advisories/29965/

Related Vulnerabilities

WordPress Improper Input Validation Vulnerability (CVE-2007-1277)

WordPress Plugin WP Learn Manager Cross-Site Scripting (1.1.2)

axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2020-28168)

WordPress Plugin Shariff for WordPress Cross-Site Scripting (1.0.7)

WordPress Plugin Scriptless Social Sharing Cross-Site Scripting (3.2.1)

Severity

High

Classification

CVE-2008-1930 CWE-287 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update