CVE-2014-5072

HIGH 8.8 CVSS 3.0

Published: April 6, 2018
Last modified: June 17, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-352
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Cross-site request forgery (CSRF) vulnerability in WP Security Audit Log plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected products and versions

n/a n/a — Versions not specified
wpsecurityauditlog wp_security_audit_log — Before 1.2.5

References

github.com https://github.com/0pc0deFR/Exploits/tree/master/CVE-2014-5072 Third Party Advisory
www.wpsecurityauditlog.com https://www.wpsecurityauditlog.com/plugin-change-log/ Release Notes
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References