Lucene search
Veracode Vulnerability DatabaseVERACODE:4776HistoryJul 28, 2017 - 5:09 a.m.
Cross-Site Request Forgery (CSRF)
2017-07-2805:09:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.009 Low
EPSS
Percentile
82.5%
WordPress is vulnerable to cross-site request forgery (CSRF) attacks. The attacks are possible because wp-admin/post.php does not prevent the attackers from sending requests which locks posts from being edited. This can also lead to denial of service (DoS) attacks through a get-post-lock action.
References
openwall.com/lists/oss-security/2015/08/04/7
www.debian.org/security/2015/dsa-3332
www.debian.org/security/2015/dsa-3383
www.securityfocus.com/bid/76160
www.securitytracker.com/id/1033178
codex.wordpress.org/Version_4.2.4
core.trac.wordpress.org/changeset/33542
core.trac.wordpress.org/changeset/33543
wordpress.org/news/2015/08/wordpress-4-2-4-security-and-maintenance-release/
www.debian.org/security/2015/dsa-3332
Related
prion
prion
Cross site request forgery (csrf)
2015-11-09 11:59:00
cve
cve
CVE-2015-5731
2015-11-09 11:59:03
ubuntucve
ubuntucve
CVE-2015-5731
2015-11-09 00:00:00
patchstack
patchstack
WordPress <= 4.2.3 - CSRF
2015-08-04 00:00:00
nvd
nvd
CVE-2015-5731
2015-11-09 11:59:03
cvelist
cvelist
CVE-2015-5731
2015-11-09 11:00:00
debiancve
debiancve
CVE-2015-5731
2015-11-09 11:59:03
debian
debian
[SECURITY] [DLA 294-1] wordpress security update
2015-08-19 12:58:59
[SECURITY] [DSA 3332-1] wordpress security update
2015-08-11 19:55:16
[SECURITY] [DSA 3383-1] wordpress security update
2015-10-29 20:02:31
nessus
nessus
Debian DLA-294-1 : wordpress security update
2015-08-20 00:00:00
WordPress < 4.2.4 Multiple Vulnerabilities
2015-12-17 00:00:00
Debian DSA-3332-1 : wordpress - security update
2015-08-13 00:00:00
osv
osv
wordpress - security update
2015-08-19 00:00:00
wordpress - security update
2015-08-11 00:00:00
wordpress - regression update
2015-08-11 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-294-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2015-0309)
2022-01-28 00:00:00
WordPress Multiple Vulnerabilities (Dec 2015) - Linux
2015-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: wordpress-4.2.4-1.fc23
2015-08-10 10:04:17
[SECURITY] Fedora 22 Update: wordpress-4.2.4-1.fc22
2015-08-13 16:57:53
[SECURITY] Fedora 21 Update: wordpress-4.2.4-1.fc21
2015-08-13 16:54:48
archlinux
archlinux
wordpress: multiple issues
2015-08-07 00:00:00
freebsd
freebsd
wordpress -- Multiple vulnerability
2015-08-04 00:00:00
mageia
mageia
Updated wordpress package fixes security vulnerability
2015-08-10 17:31:41
securityvulns
securityvulns
[SECURITY] [DSA 3332-1] wordpress security update
2015-08-24 00:00:00
WiFi Pineapple protection bypass
2015-08-24 00:00:00