CVE-2016-6635

CVE-2016-6635 affects WordPress core: the CSRF flaw is in wp_ajax_wp_compression_test (wp-admin/includes/ajax-actions.php) in WordPress before 4.5, enabling remote attackers to hijack administrator sessions and change the script compression option. Affected: WordPress prior to 4.5. Impact: admin-...

CVE-2016-6635

Cross-site request forgery CSRF vulnerability in the wpajaxwpcompressiontest function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for requests that change the script compression option...