CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5204

wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on which characters in the nonce are incorrect, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 46.3%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2014-5204

Wordpress » Wordpress » Version: N/A

cpe:2.3:a:wordpress:wordpress:-
Wordpress » Wordpress » Version: 0.71

cpe:2.3:a:wordpress:wordpress:0.71
Wordpress » Wordpress » Version: 0.711

cpe:2.3:a:wordpress:wordpress:0.711
Wordpress » Wordpress » Version: 0.72

cpe:2.3:a:wordpress:wordpress:0.72
Wordpress » Wordpress » Version: 1.0

cpe:2.3:a:wordpress:wordpress:1.0
Wordpress » Wordpress » Version: 1.0.1

cpe:2.3:a:wordpress:wordpress:1.0.1
Wordpress » Wordpress » Version: 1.0.2

cpe:2.3:a:wordpress:wordpress:1.0.2
Wordpress » Wordpress » Version: 1.1.1

cpe:2.3:a:wordpress:wordpress:1.1.1
Wordpress » Wordpress » Version: 1.2

cpe:2.3:a:wordpress:wordpress:1.2
Wordpress » Wordpress » Version: 1.2.1

cpe:2.3:a:wordpress:wordpress:1.2.1
Wordpress » Wordpress » Version: 1.2.2

cpe:2.3:a:wordpress:wordpress:1.2.2
Wordpress » Wordpress » Version: 1.2.3

cpe:2.3:a:wordpress:wordpress:1.2.3
Wordpress » Wordpress » Version: 1.2.4

cpe:2.3:a:wordpress:wordpress:1.2.4
Wordpress » Wordpress » Version: 1.2.5

cpe:2.3:a:wordpress:wordpress:1.2.5
Wordpress » Wordpress » Version: 1.3

cpe:2.3:a:wordpress:wordpress:1.3
Wordpress » Wordpress » Version: 1.3.2

cpe:2.3:a:wordpress:wordpress:1.3.2
Wordpress » Wordpress » Version: 1.3.3

cpe:2.3:a:wordpress:wordpress:1.3.3
Wordpress » Wordpress » Version: 1.5

cpe:2.3:a:wordpress:wordpress:1.5
Wordpress » Wordpress » Version: 1.5.1

cpe:2.3:a:wordpress:wordpress:1.5.1
Wordpress » Wordpress » Version: 1.5.1.1

cpe:2.3:a:wordpress:wordpress:1.5.1.1
Wordpress » Wordpress » Version: 1.5.1.2

cpe:2.3:a:wordpress:wordpress:1.5.1.2
Wordpress » Wordpress » Version: 1.5.1.3

cpe:2.3:a:wordpress:wordpress:1.5.1.3
Wordpress » Wordpress » Version: 1.5.2

cpe:2.3:a:wordpress:wordpress:1.5.2
Wordpress » Wordpress » Version: 1.6.2

cpe:2.3:a:wordpress:wordpress:1.6.2
Wordpress » Wordpress » Version: 2.0

cpe:2.3:a:wordpress:wordpress:2.0
Wordpress » Wordpress » Version: 2.0.1

cpe:2.3:a:wordpress:wordpress:2.0.1
Wordpress » Wordpress » Version: 2.0.10

cpe:2.3:a:wordpress:wordpress:2.0.10
Wordpress » Wordpress » Version: 2.0.11

cpe:2.3:a:wordpress:wordpress:2.0.11
Wordpress » Wordpress » Version: 2.0.2

cpe:2.3:a:wordpress:wordpress:2.0.2
Wordpress » Wordpress » Version: 2.0.3

cpe:2.3:a:wordpress:wordpress:2.0.3
Wordpress » Wordpress » Version: 2.0.4

cpe:2.3:a:wordpress:wordpress:2.0.4
Wordpress » Wordpress » Version: 2.0.5

cpe:2.3:a:wordpress:wordpress:2.0.5
Wordpress » Wordpress » Version: 2.0.6

cpe:2.3:a:wordpress:wordpress:2.0.6
Wordpress » Wordpress » Version: 2.0.7

cpe:2.3:a:wordpress:wordpress:2.0.7
Wordpress » Wordpress » Version: 2.0.8

cpe:2.3:a:wordpress:wordpress:2.0.8
Wordpress » Wordpress » Version: 2.0.9

cpe:2.3:a:wordpress:wordpress:2.0.9
Wordpress » Wordpress » Version: 2.1

cpe:2.3:a:wordpress:wordpress:2.1
Wordpress » Wordpress » Version: 2.1.1

cpe:2.3:a:wordpress:wordpress:2.1.1
Wordpress » Wordpress » Version: 2.1.2

cpe:2.3:a:wordpress:wordpress:2.1.2
Wordpress » Wordpress » Version: 2.1.3

cpe:2.3:a:wordpress:wordpress:2.1.3
Wordpress » Wordpress » Version: 2.2

cpe:2.3:a:wordpress:wordpress:2.2
Wordpress » Wordpress » Version: 2.2.1

cpe:2.3:a:wordpress:wordpress:2.2.1
Wordpress » Wordpress » Version: 2.2.2

cpe:2.3:a:wordpress:wordpress:2.2.2
Wordpress » Wordpress » Version: 2.2.3

cpe:2.3:a:wordpress:wordpress:2.2.3
Wordpress » Wordpress » Version: 2.3

cpe:2.3:a:wordpress:wordpress:2.3
Wordpress » Wordpress » Version: 2.3.1

cpe:2.3:a:wordpress:wordpress:2.3.1
Wordpress » Wordpress » Version: 2.3.2

cpe:2.3:a:wordpress:wordpress:2.3.2
Wordpress » Wordpress » Version: 2.3.3

cpe:2.3:a:wordpress:wordpress:2.3.3
Wordpress » Wordpress » Version: 2.5

cpe:2.3:a:wordpress:wordpress:2.5
Wordpress » Wordpress » Version: 2.5.1

cpe:2.3:a:wordpress:wordpress:2.5.1
Wordpress » Wordpress » Version: 2.6

cpe:2.3:a:wordpress:wordpress:2.6
Wordpress » Wordpress » Version: 2.6.1

cpe:2.3:a:wordpress:wordpress:2.6.1
Wordpress » Wordpress » Version: 2.6.2

cpe:2.3:a:wordpress:wordpress:2.6.2
Wordpress » Wordpress » Version: 2.6.3

cpe:2.3:a:wordpress:wordpress:2.6.3
Wordpress » Wordpress » Version: 2.6.5

cpe:2.3:a:wordpress:wordpress:2.6.5
Wordpress » Wordpress » Version: 2.7

cpe:2.3:a:wordpress:wordpress:2.7
Wordpress » Wordpress » Version: 2.7.1

cpe:2.3:a:wordpress:wordpress:2.7.1
Wordpress » Wordpress » Version: 2.8

cpe:2.3:a:wordpress:wordpress:2.8
Wordpress » Wordpress » Version: 2.8.1

cpe:2.3:a:wordpress:wordpress:2.8.1
Wordpress » Wordpress » Version: 2.8.2

cpe:2.3:a:wordpress:wordpress:2.8.2
Wordpress » Wordpress » Version: 2.8.3

cpe:2.3:a:wordpress:wordpress:2.8.3
Wordpress » Wordpress » Version: 2.8.4

cpe:2.3:a:wordpress:wordpress:2.8.4
Wordpress » Wordpress » Version: 2.8.5

cpe:2.3:a:wordpress:wordpress:2.8.5
Wordpress » Wordpress » Version: 2.8.5.1

cpe:2.3:a:wordpress:wordpress:2.8.5.1
Wordpress » Wordpress » Version: 2.8.5.2

cpe:2.3:a:wordpress:wordpress:2.8.5.2
Wordpress » Wordpress » Version: 2.8.6

cpe:2.3:a:wordpress:wordpress:2.8.6
Wordpress » Wordpress » Version: 2.9

cpe:2.3:a:wordpress:wordpress:2.9
Wordpress » Wordpress » Version: 2.9.1

cpe:2.3:a:wordpress:wordpress:2.9.1
Wordpress » Wordpress » Version: 2.9.1.1

cpe:2.3:a:wordpress:wordpress:2.9.1.1
Wordpress » Wordpress » Version: 2.9.2

cpe:2.3:a:wordpress:wordpress:2.9.2
Wordpress » Wordpress » Version: 3.0

cpe:2.3:a:wordpress:wordpress:3.0
Wordpress » Wordpress » Version: 3.0.1

cpe:2.3:a:wordpress:wordpress:3.0.1
Wordpress » Wordpress » Version: 3.0.2

cpe:2.3:a:wordpress:wordpress:3.0.2
Wordpress » Wordpress » Version: 3.0.3

cpe:2.3:a:wordpress:wordpress:3.0.3
Wordpress » Wordpress » Version: 3.0.4

cpe:2.3:a:wordpress:wordpress:3.0.4
Wordpress » Wordpress » Version: 3.0.5

cpe:2.3:a:wordpress:wordpress:3.0.5
Wordpress » Wordpress » Version: 3.0.6

cpe:2.3:a:wordpress:wordpress:3.0.6
Wordpress » Wordpress » Version: 3.1

cpe:2.3:a:wordpress:wordpress:3.1
Wordpress » Wordpress » Version: 3.1.1

cpe:2.3:a:wordpress:wordpress:3.1.1
Wordpress » Wordpress » Version: 3.1.2

cpe:2.3:a:wordpress:wordpress:3.1.2
Wordpress » Wordpress » Version: 3.1.3

cpe:2.3:a:wordpress:wordpress:3.1.3
Wordpress » Wordpress » Version: 3.1.4

cpe:2.3:a:wordpress:wordpress:3.1.4
Wordpress » Wordpress » Version: 3.2

cpe:2.3:a:wordpress:wordpress:3.2
Wordpress » Wordpress » Version: 3.2.1

cpe:2.3:a:wordpress:wordpress:3.2.1
Wordpress » Wordpress » Version: 3.3

cpe:2.3:a:wordpress:wordpress:3.3
Wordpress » Wordpress » Version: 3.3.1

cpe:2.3:a:wordpress:wordpress:3.3.1
Wordpress » Wordpress » Version: 3.3.2

cpe:2.3:a:wordpress:wordpress:3.3.2
Wordpress » Wordpress » Version: 3.3.3

cpe:2.3:a:wordpress:wordpress:3.3.3
Wordpress » Wordpress » Version: 3.4

cpe:2.3:a:wordpress:wordpress:3.4
Wordpress » Wordpress » Version: 3.4.0

cpe:2.3:a:wordpress:wordpress:3.4.0
Wordpress » Wordpress » Version: 3.4.1

cpe:2.3:a:wordpress:wordpress:3.4.1
Wordpress » Wordpress » Version: 3.4.2

cpe:2.3:a:wordpress:wordpress:3.4.2
Wordpress » Wordpress » Version: 3.5

cpe:2.3:a:wordpress:wordpress:3.5
Wordpress » Wordpress » Version: 3.5.0

cpe:2.3:a:wordpress:wordpress:3.5.0
Wordpress » Wordpress » Version: 3.5.1

cpe:2.3:a:wordpress:wordpress:3.5.1
Wordpress » Wordpress » Version: 3.5.2

cpe:2.3:a:wordpress:wordpress:3.5.2
Wordpress » Wordpress » Version: 3.6

cpe:2.3:a:wordpress:wordpress:3.6
Wordpress » Wordpress » Version: 3.6.1

cpe:2.3:a:wordpress:wordpress:3.6.1
Wordpress » Wordpress » Version: 3.7

cpe:2.3:a:wordpress:wordpress:3.7
Wordpress » Wordpress » Version: 3.7.1

cpe:2.3:a:wordpress:wordpress:3.7.1
Wordpress » Wordpress » Version: 3.7.10

cpe:2.3:a:wordpress:wordpress:3.7.10
Wordpress » Wordpress » Version: 3.7.11

cpe:2.3:a:wordpress:wordpress:3.7.11
Wordpress » Wordpress » Version: 3.7.12

cpe:2.3:a:wordpress:wordpress:3.7.12
Wordpress » Wordpress » Version: 3.7.13

cpe:2.3:a:wordpress:wordpress:3.7.13
Wordpress » Wordpress » Version: 3.7.14

cpe:2.3:a:wordpress:wordpress:3.7.14
Wordpress » Wordpress » Version: 3.7.15

cpe:2.3:a:wordpress:wordpress:3.7.15
Wordpress » Wordpress » Version: 3.7.16

cpe:2.3:a:wordpress:wordpress:3.7.16
Wordpress » Wordpress » Version: 3.7.17

cpe:2.3:a:wordpress:wordpress:3.7.17
Wordpress » Wordpress » Version: 3.7.18

cpe:2.3:a:wordpress:wordpress:3.7.18
Wordpress » Wordpress » Version: 3.7.19

cpe:2.3:a:wordpress:wordpress:3.7.19
Wordpress » Wordpress » Version: 3.7.2

cpe:2.3:a:wordpress:wordpress:3.7.2
Wordpress » Wordpress » Version: 3.7.20

cpe:2.3:a:wordpress:wordpress:3.7.20
Wordpress » Wordpress » Version: 3.7.21

cpe:2.3:a:wordpress:wordpress:3.7.21
Wordpress » Wordpress » Version: 3.7.22

cpe:2.3:a:wordpress:wordpress:3.7.22
Wordpress » Wordpress » Version: 3.7.23

cpe:2.3:a:wordpress:wordpress:3.7.23
Wordpress » Wordpress » Version: 3.7.24

cpe:2.3:a:wordpress:wordpress:3.7.24
Wordpress » Wordpress » Version: 3.7.25

cpe:2.3:a:wordpress:wordpress:3.7.25
Wordpress » Wordpress » Version: 3.7.26

cpe:2.3:a:wordpress:wordpress:3.7.26
Wordpress » Wordpress » Version: 3.7.27

cpe:2.3:a:wordpress:wordpress:3.7.27
Wordpress » Wordpress » Version: 3.7.28

cpe:2.3:a:wordpress:wordpress:3.7.28
Wordpress » Wordpress » Version: 3.7.29

cpe:2.3:a:wordpress:wordpress:3.7.29
Wordpress » Wordpress » Version: 3.7.3

cpe:2.3:a:wordpress:wordpress:3.7.3
Wordpress » Wordpress » Version: 3.7.30

cpe:2.3:a:wordpress:wordpress:3.7.30
Wordpress » Wordpress » Version: 3.7.31

cpe:2.3:a:wordpress:wordpress:3.7.31
Wordpress » Wordpress » Version: 3.7.32

cpe:2.3:a:wordpress:wordpress:3.7.32
Wordpress » Wordpress » Version: 3.7.33

cpe:2.3:a:wordpress:wordpress:3.7.33
Wordpress » Wordpress » Version: 3.7.34

cpe:2.3:a:wordpress:wordpress:3.7.34
Wordpress » Wordpress » Version: 3.7.35

cpe:2.3:a:wordpress:wordpress:3.7.35
Wordpress » Wordpress » Version: 3.7.36

cpe:2.3:a:wordpress:wordpress:3.7.36
Wordpress » Wordpress » Version: 3.7.37

cpe:2.3:a:wordpress:wordpress:3.7.37
Wordpress » Wordpress » Version: 3.7.38

cpe:2.3:a:wordpress:wordpress:3.7.38
Wordpress » Wordpress » Version: 3.7.4

cpe:2.3:a:wordpress:wordpress:3.7.4
Wordpress » Wordpress » Version: 3.7.5

cpe:2.3:a:wordpress:wordpress:3.7.5
Wordpress » Wordpress » Version: 3.7.6

cpe:2.3:a:wordpress:wordpress:3.7.6
Wordpress » Wordpress » Version: 3.7.7

cpe:2.3:a:wordpress:wordpress:3.7.7
Wordpress » Wordpress » Version: 3.7.8

cpe:2.3:a:wordpress:wordpress:3.7.8
Wordpress » Wordpress » Version: 3.7.9

cpe:2.3:a:wordpress:wordpress:3.7.9
Wordpress » Wordpress » Version: 3.8

cpe:2.3:a:wordpress:wordpress:3.8
Wordpress » Wordpress » Version: 3.8.1

cpe:2.3:a:wordpress:wordpress:3.8.1
Wordpress » Wordpress » Version: 3.8.10

cpe:2.3:a:wordpress:wordpress:3.8.10
Wordpress » Wordpress » Version: 3.8.11

cpe:2.3:a:wordpress:wordpress:3.8.11
Wordpress » Wordpress » Version: 3.8.12

cpe:2.3:a:wordpress:wordpress:3.8.12
Wordpress » Wordpress » Version: 3.8.13

cpe:2.3:a:wordpress:wordpress:3.8.13
Wordpress » Wordpress » Version: 3.8.14

cpe:2.3:a:wordpress:wordpress:3.8.14
Wordpress » Wordpress » Version: 3.8.15

cpe:2.3:a:wordpress:wordpress:3.8.15
Wordpress » Wordpress » Version: 3.8.16

cpe:2.3:a:wordpress:wordpress:3.8.16
Wordpress » Wordpress » Version: 3.8.17

cpe:2.3:a:wordpress:wordpress:3.8.17
Wordpress » Wordpress » Version: 3.8.18

cpe:2.3:a:wordpress:wordpress:3.8.18
Wordpress » Wordpress » Version: 3.8.19

cpe:2.3:a:wordpress:wordpress:3.8.19
Wordpress » Wordpress » Version: 3.8.2

cpe:2.3:a:wordpress:wordpress:3.8.2
Wordpress » Wordpress » Version: 3.8.20

cpe:2.3:a:wordpress:wordpress:3.8.20
Wordpress » Wordpress » Version: 3.8.21

cpe:2.3:a:wordpress:wordpress:3.8.21
Wordpress » Wordpress » Version: 3.8.22

cpe:2.3:a:wordpress:wordpress:3.8.22
Wordpress » Wordpress » Version: 3.8.23

cpe:2.3:a:wordpress:wordpress:3.8.23
Wordpress » Wordpress » Version: 3.8.24

cpe:2.3:a:wordpress:wordpress:3.8.24
Wordpress » Wordpress » Version: 3.8.25

cpe:2.3:a:wordpress:wordpress:3.8.25
Wordpress » Wordpress » Version: 3.8.26

cpe:2.3:a:wordpress:wordpress:3.8.26
Wordpress » Wordpress » Version: 3.8.27

cpe:2.3:a:wordpress:wordpress:3.8.27
Wordpress » Wordpress » Version: 3.8.28

cpe:2.3:a:wordpress:wordpress:3.8.28
Wordpress » Wordpress » Version: 3.8.29

cpe:2.3:a:wordpress:wordpress:3.8.29
Wordpress » Wordpress » Version: 3.8.3

cpe:2.3:a:wordpress:wordpress:3.8.3
Wordpress » Wordpress » Version: 3.8.30

cpe:2.3:a:wordpress:wordpress:3.8.30
Wordpress » Wordpress » Version: 3.8.31

cpe:2.3:a:wordpress:wordpress:3.8.31
Wordpress » Wordpress » Version: 3.8.32

cpe:2.3:a:wordpress:wordpress:3.8.32
Wordpress » Wordpress » Version: 3.8.33

cpe:2.3:a:wordpress:wordpress:3.8.33
Wordpress » Wordpress » Version: 3.8.34

cpe:2.3:a:wordpress:wordpress:3.8.34
Wordpress » Wordpress » Version: 3.8.35

cpe:2.3:a:wordpress:wordpress:3.8.35
Wordpress » Wordpress » Version: 3.8.36

cpe:2.3:a:wordpress:wordpress:3.8.36
Wordpress » Wordpress » Version: 3.8.37

cpe:2.3:a:wordpress:wordpress:3.8.37
Wordpress » Wordpress » Version: 3.8.38

cpe:2.3:a:wordpress:wordpress:3.8.38
Wordpress » Wordpress » Version: 3.8.4

cpe:2.3:a:wordpress:wordpress:3.8.4
Wordpress » Wordpress » Version: 3.8.5

cpe:2.3:a:wordpress:wordpress:3.8.5
Wordpress » Wordpress » Version: 3.8.6

cpe:2.3:a:wordpress:wordpress:3.8.6
Wordpress » Wordpress » Version: 3.8.7

cpe:2.3:a:wordpress:wordpress:3.8.7
Wordpress » Wordpress » Version: 3.8.8

cpe:2.3:a:wordpress:wordpress:3.8.8
Wordpress » Wordpress » Version: 3.8.9

cpe:2.3:a:wordpress:wordpress:3.8.9
Wordpress » Wordpress » Version: 3.9

cpe:2.3:a:wordpress:wordpress:3.9
Wordpress » Wordpress » Version: 3.9.0

cpe:2.3:a:wordpress:wordpress:3.9.0
Wordpress » Wordpress » Version: 3.9.1

cpe:2.3:a:wordpress:wordpress:3.9.1
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5204

Products

Pricing

Contact Us