Security Advisory
CVE-2014-5204
6.8
Vulnerability Description
wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on which characters in the nonce are incorrect, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack.
Published Date
August 18, 2014
Official Source
NIST NVD Advisory