Description

WordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.

Remediation

References

CVE-2014-6412

Related Vulnerabilities

Oracle Database Server CVE-2010-4423 Vulnerability (CVE-2010-4423)

MySQL CVE-2023-22092 Vulnerability (CVE-2023-22092)

Oracle Application Server Other Vulnerability (CVE-2001-0591)

WordPress Plugin Craw Data Server-Side Request Forgery (1.0.0)

WordPress Plugin Facebook Promotion Generator for WordPress 'fbActivate.php' SQL Injection (1.3.3)

Severity

High

Classification

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-640 CVE-2014-6412