WordPress server-side Request Forgery Security Restriction Bypass Vulnerability

WordPress server-side Request Forgery Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
WordPress 4.x
WordPress 3.x
Description:
Bugtraq id: 71234

WordPress is a blog platform developed in PHP. you can build your own website on servers that support PHP and MySQL databases.

WordPress 4.0.1, 3.9.3, 3.8.5, and 3.7.5 have a Security Restriction Bypass Vulnerability. Attackers can exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations.

<* Source: Ben Bidner (vortfu)
*>

Suggestion:
Vendor patch:

WordPress
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://wordpress.org/

This article permanently updates the link address: