Cross site request forgery (csrf)

WordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which makes it easier for remote attackers to conduct delayed and persistent cross-site request forgery CSRF attacks via crafted cookies, as demonstrated by attacks that 1 delete user accounts or 2 cause a...

CVE-2008-5113

CVE-2008-5113 affects WordPress 2.6.3, where reliance on the REQUEST superglobal in certain dangerous situations enables remote attackers to perform delayed, persistent CSRF via crafted cookies, potentially deleting user accounts or causing denial of service. The description notes an independent ...