CVEs-PoC/2014/CVE-2014-6412.md

CVE-2014-6412

Description

WordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.

POC

Reference

• http://packetstormsecurity.com/files/130380/WordPress-Failed-Randomness.html
• http://packetstormsecurity.com/files/130380/WordPress-Failed-Randomness.html
• http://seclists.org/fulldisclosure/2015/Feb/42
• http://seclists.org/fulldisclosure/2015/Feb/42

Github

No PoCs found on GitHub currently.