WordPress Vulnerabilities

WordPress 3.7.1 & 3.8 - Cleartext Admin Credentials Disclosure

Affects WordPress

3.8
No known fix
3.7.1
No known fix

References

URL
https://seclists.org/fulldisclosure/2013/Dec/135

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Verified
No
WPVDB ID
b4e807a3-10a9-4cac-bcb5-715e33430e74

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2017-05-05
Title
Download Monitor < 1.9.7 - Unauthenticated Downloading of Logs
Published
2018-11-27
Title
Woo Confirmation Email < 3.2.0 - Missing Access Controls to View Uploaded files
Published
2020-01-14
Title
InfiniteWP Client < 1.9.4.5 - Authentication Bypass
Published
2019-08-12
Title
JVM WooCommerce Wishlist <= 1.2.6 - Insecure Direct Object Reference
Published
2014-08-01
Title
All in One SEO Pack <= 2.1.5 - Unspecified Privilege Escalation