CVE-2015-5731

Description

Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post, and consequently cause a denial of service (editing blockage), via a get-post-lock action.

Risk Information

Base Score

8.3

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

EPSS Score

Exploitation Probability

14.757

Associated Vulnerability

Vulnerability	OS Platform
Update wordpress 4.2.3 to latest version	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234