CVE-2012-1936

CVE-2012-1936 affects WordPress 3.3.1 and earlier. The wp_create_nonce function associates a nonce with a user account rather than the session, which can facilitate cross-site request forgery (CSRF) against actions like wp-admin/admin-ajax.php and wp-admin/user-new.php. Multiple CSRF vectors were...

WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities

WordPress 3.3.1 - Multiple Cross-Site Request Forgery Vulnerabilities +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-20...