PT-2016-6706

CVE-2016-5838

Published

2016-06-29

Updated

2016-11-30

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.5.3

Description The issue allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie.

Recommendations For versions prior to 4.5.3, update to version 4.5.3 or later to resolve the issue.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

DLA-568-1

DSA-3639-1

Found an issue in the description? Have something to add? Feel free to write us 👾