Description

Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Remediation

References

CVE-2012-3384

Related Vulnerabilities

WordPress Plugin W4 Post List Multiple Vulnerabilities (2.4.5)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2933)

WordPress Plugin VideoWhisper Video Presentation 'c_status.php' SQL Injection (1.1)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-2202)

XWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-32068)

Severity

Medium

Classification

CVE-2012-3384 CWE-352

Tags

Missing Update Known Vulnerabilities