Security Advisory
CVE-2015-5731
6.8
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post, and consequently cause a denial of service (editing blockage), via a get-post-lock action.
Published Date
November 9, 2015
Official Source
NIST NVD Advisory