CVEs-PoC/2012/CVE-2012-5868.md

CVE-2012-5868

Description

WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/alexjasso/Project_7-WordPress_Pentesting
• https://github.com/anushareddy139/wpvskali
• https://github.com/jonkillinger/FacebookCyberSecurityCourseWeek7