Description
In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.
Remediation
References
Related Vulnerabilities
MySQL CVE-2012-1690 Vulnerability (CVE-2012-1690)
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.16)
TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3942)
WordPress Plugin Google Map Remote Code Execution (1.0)
Moodle Resource Management Errors Vulnerability (CVE-2015-2268)