Security Advisory
CVE-2016-6635
8.8
HIGH
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for requests that change the script compression option.
Published Date
August 7, 2016
Official Source
NIST NVD Advisory