CVE-2014-5072

Cross-site request forgery (CSRF) vulnerability in WP Security Audit Log plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-04-06

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Wp Security Audit Log (Wpsecurityauditlog)

References

• https://github.com/0pc0deFR/Exploits/tree/master/CVE-2014-5072
• https://www.wpsecurityauditlog.com/plugin-change-log/