CVE-2014-9037
MEDIUM 6.8EPSS 2.6%
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash.
- CVSS v2.0
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 2.57% chance of exploitation in the next 30 days, 84th percentile
- Nuclei
- high
- Published
- 2014-11-25
- Updated
- 2024-08-06