CVE-2014-3882 Login rebuilder < 1.2.0 - Cross-Site Request Forgery
MediumCVSS 6.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 12net login rebuilder | <= 1.1.3 | No fix listed |
| 12net login rebuilder | = 1.0.0 | No fix listed |
| 12net login rebuilder | = 1.0.1 | No fix listed |
| 12net login rebuilder | = 1.0.2 | No fix listed |
| 12net login rebuilder | = 1.0.3 | No fix listed |
| 12net login rebuilder | = 1.1.0 | No fix listed |
| 12net login rebuilder | = 1.1.1 | No fix listed |
| 12net login rebuilder | = 1.1.2 | No fix listed |
| wordpress login-rebuilder(WordPress) | < 1.2.0 | 1.2.0 |
References
- 12net.jp patch vendor-advisory
- JVN#05329568 third-party-advisory
- JVNDB-2014-000062 third-party-advisory
- wordpress.org patch
- Wordfence Intelligence third-party-advisory
- www.cve.org