Ivan Novikov

**Name of the Vulnerable Software and Affected Versions** WordPress versions prior to 3.9.2 **Description** The issue concerns a weakness in the CSRF token generation mechanism. Specifically, it does not properly use delimiters during the concatenation of action values and uid values, making it easier for remote attackers to bypass the CSRF protection mechanism via a brute-force attack. **Recommendations** For versions prior to 3.9.2, update to version 3.9.2 or later to resolve the issue.