CSRF Vulnerability in WP Security Audit Log Plugin for WordPress
CVE-2014-5072

8.8HIGH

Key Information:

Vendor
Wordpress
Status
WP Security Audit Log
Vendor
CVE Published:
6 April 2018

Summary

The WP Security Audit Log plugin for WordPress contains a cross-site request forgery (CSRF) vulnerability that allows remote attackers to compromise the authentication of affected users. This flaw may enable unauthorized access and manipulation of sensitive actions performed within the WordPress dashboard. It is crucial for users to upgrade to versions 1.2.5 or higher to safeguard against potential exploitation.

References

https://www.wpsecurityauditlog.com/plugin-change-log/
x_refsource_CONFIRM
https://github.com/0pc0deFR/Exploits/tree/master/CVE-2014...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.