CVE-2015-0895 in All In One Wordpress Security And Firewallinfo

Summary

Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 (aka Not Found) HTTP status codes.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

01/08/2015

Disclosure

03/06/2015

Entries

1

CPE

ready

CVSS

6.3

EPSS

0.00136

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!