CVE-2012-2401

CVE-2012-2401 affects WordPress before 3.3.2 via Plupload 1.5.3 and related components, where SWF content loaded from any domain could bypass Same Origin Policy, enabling cross-site scripting/credential risks as described in the vulnerability entry. Root cause: improper origin checks in Plupload ...