Description
In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.
Remediation
References
Related Vulnerabilities
Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9749)
WordPress Plugin Testimonial Slider Cross-Site Scripting (1.2.1)
Joomla! Core Multiple Vulnerabilities (2.5.0 - 3.9.2)
PHP Out-of-bounds Read Vulnerability (CVE-2024-8929)
Apache Tomcat Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-41079)