PT-2015-7053

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.2.4 Description The issue concerns a timing side-channel attack. It is related to the sanitize widget instance function, which does not use a constant-time comparison for widgets. This allows remote attackers to...