Description
Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post, and consequently cause a denial of service (editing blockage), via a get-post-lock action.
Remediation
References
Related Vulnerabilities
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-7060)
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2018-8005)
WordPress Plugin Simple Job Board Cross-Site Scripting (2.9.4)
WordPress Plugin Alpine PhotoTile for Instagram Cross-Site Scripting (1.2.6.5)