Vulnerability Database

296,202

Total vulnerabilities in the database

CVE-2012-5868

WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.

  • Published: Dec 27, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-5868
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.6
  • AV:N/AC:H/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
WordPress / wordpress 3.4.2 3.4.2.x