Vulnerability Details CVE-2014-3882
Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.2%
CVSS Severity
CVSS v2 Score 6.8
References
- http://12net.jp/news/n20140623_01.html
- http://jvn.jp/en/jp/JVN05329568/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000062
- http://wordpress.org/plugins/login-rebuilder/changelog/
- http://12net.jp/news/n20140623_01.html
- http://jvn.jp/en/jp/JVN05329568/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000062
- http://wordpress.org/plugins/login-rebuilder/changelog/
Products affected by CVE-2014-3882
-
cpe:2.3:a:12net:login_rebuilder:1.0.0
-
cpe:2.3:a:12net:login_rebuilder:1.0.1
-
cpe:2.3:a:12net:login_rebuilder:1.0.2
-
cpe:2.3:a:12net:login_rebuilder:1.0.3
-
cpe:2.3:a:12net:login_rebuilder:1.1.0
-
cpe:2.3:a:12net:login_rebuilder:1.1.1
-
cpe:2.3:a:12net:login_rebuilder:1.1.2
-
cpe:2.3:a:12net:login_rebuilder:1.1.3