VULNERABILITY INTELLIGENCE

CVE-2014-5034

CVSS score8.8 HIGH
EPSS probability1.08%
CISA KEVNot currently listed
Published2018-04-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Cross-site request forgery (CSRF) vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to wp-admin/options-general.php.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references