Security Advisory
CVE-2014-5205
6.8
Vulnerability Description
wp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation of action values and uid values in CSRF tokens, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a brute-force attack.
Published Date
August 18, 2014
Official Source
NIST NVD Advisory