PT-2012-3667 · WordPress · Wordpress

Ivano Binetti · Published 2012-05-03 · Updated 2024-08-06 · CVE-2012-1936

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WordPress versions 3.3.1 and earlier

Description The issue is related to the wp create nonce function, which associates a nonce with a user account instead of a user session. This might make it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks on specific actions and objects by sniffing the network. Attacks can be demonstrated against the "wp-admin/admin-ajax.php" and "wp-admin/user-new.php" scripts. The vendor reportedly disputes the significance of this issue, stating that wp create nonce operates as intended.

Recommendations For WordPress versions 3.3.1 and earlier, consider updating to a newer version to mitigate the risk of CSRF attacks. As a temporary workaround, restrict access to the "wp-admin/admin-ajax.php" and "wp-admin/user-new.php" scripts to minimize the risk of exploitation. Avoid using the wp create nonce function until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2012-1936

Affected Products

Wordpress

References · 8

• 🔥 https://exploit-db.com/exploits/18791 · Exploit
• 🔥 http://webapp-security.com/wp-content/uploads/2012/04/Wordpress-3.3.1-Multiple-CSRF-Vulnerabilities6.txt · Exploit
• 🔥 http://exploit-db.com/exploits/18791 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-1936 · Security Note
• http://securityfocus.com/bid/53280 · Note
• https://t.me/cvenotify/89502 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1936 · Note
• http://webapp-security.com/2012/04/wordpress-3-3-1-multiple-csrf-vulnerabilities · Note