Description
Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users.
References (4)
Core 4
Core References
Patch, Vendor Advisory x_refsource_confirm
http://12net.jp/news/n20140623_01.html
Third Party Advisory third-party-advisory
x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000062
Patch x_refsource_confirm
http://wordpress.org/plugins/login-rebuilder/changelog/
Third Party Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN05329568/index.html
Scores
EPSS
0.0108
EPSS Percentile
61.0%
Details
CWE
CWE-352
Status
published
Products (8)
12net/login_rebuilder
1.0.0
12net/login_rebuilder
1.0.1
12net/login_rebuilder
1.0.2
12net/login_rebuilder
1.0.3
12net/login_rebuilder
1.1.0
12net/login_rebuilder
1.1.1
12net/login_rebuilder
1.1.2
12net/login_rebuilder
< 1.1.3
Published
Jun 25, 2014
Tracked Since
Feb 18, 2026