Cross-site request forgery (CSRF) vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to wp-admin/options-general.php.
References
| Link | Resource |
|---|---|
| https://github.com/0pc0deFR/Exploits/blob/master/CVE-2014-5034/exploit.html | Exploit Third Party Advisory |
| https://github.com/0pc0deFR/wordpress-sploit-framework/blob/master/exploits/Brute_Force_Login_Protection_1_3_Cross_Site_Request_Forgery | Exploit Third Party Advisory |
| https://github.com/0pc0deFR/Exploits/blob/master/CVE-2014-5034/exploit.html | Exploit Third Party Advisory |
| https://github.com/0pc0deFR/wordpress-sploit-framework/blob/master/exploits/Brute_Force_Login_Protection_1_3_Cross_Site_Request_Forgery | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 02:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/0pc0deFR/Exploits/blob/master/CVE-2014-5034/exploit.html - Exploit, Third Party Advisory | |
| References | () https://github.com/0pc0deFR/wordpress-sploit-framework/blob/master/exploits/Brute_Force_Login_Protection_1_3_Cross_Site_Request_Forgery - Exploit, Third Party Advisory |
Information
Published : 2018-04-06 16:29
Updated : 2024-11-21 02:11
NVD link : CVE-2014-5034
Mitre link : CVE-2014-5034
CVE.ORG link : CVE-2014-5034
JSON object : View
Products Affected
fresh-media
- brute_force_login_protection
CWE
CWE-352
Cross-Site Request Forgery (CSRF)