PoC Index85,101 CVEs with PoCs

CVE-2012-5868

LOW 2.6EPSS 2.7%

WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.

CVSS v2.0 NVD
2.6 LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
EPSS
2.72% chance of exploitation in the next 30 days, 86th percentile
Published
2012-12-27
Updated
2024-09-16

Proof-of-concept exploits (1)

References