Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-5205

wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.6%
CVSS Severity
CVSS v2 Score 6.8
Products affected by CVE-2014-5205


Contact Us

Shodan ® - All rights reserved