https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T14:14:13.040751+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-170205 EUVD-2026-170205 2026-10-20T14:14:13.044210+00:00 EUVD-2026-170205 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5868 fkie_cve-2012-5868 2026-10-20T14:14:13.044263+00:00

WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.

 https://cve.radiocsirt.org/vuln/ghsa-vpmj-9973-3qg4 GHSA-vpmj-9973-3qg4 2026-10-20T14:14:13.044316+00:00

WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.

 https://cve.radiocsirt.org/vuln/gsd-2012-5868 gsd-2012-5868 2026-10-20T14:14:13.044346+00:00 gsd-2012-5868 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-5868 UBUNTU-CVE-2012-5868 2026-10-20T14:14:13.044369+00:00

Affected: Ubuntu:16.04:LTS: wordpress, Ubuntu:18.04:LTS: wordpress

WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.