CVE-2014-5034 | BDVDB-2026-99015 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that have unknown impact via a crafted request to the brute-force-login-protection page to wp-admin/options-general.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/0pc0deFR/Exploits/blob/master/CVE-2014-5034/exploit.html
https://github.com/0pc0deFR/wordpress-sploit-framework/blob/master/exploits/Brute_Force_Login_Protection_1_3_Cross_Site_Request_Forgery

Exploit#

No public exploit known

History#

Version 12018-04-06Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.