https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T06:59:25.445934+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-166 certfr-2014-avi-166 — De multiples vulnérabilités ont été corrigées dans <span class="textit">WordPress</span>. Certaines d'entre elles perme… 2026-10-21T06:59:25.451102+00:00 certfr-2014-avi-166 https://cve.radiocsirt.org/vuln/euvd-2026-96732 EUVD-2026-96732 2026-10-21T06:59:25.451144+00:00 EUVD-2026-96732 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0166 fkie_cve-2014-0166 2026-10-21T06:59:25.451159+00:00

The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.

 https://cve.radiocsirt.org/vuln/ghsa-jg4j-hqh7-5qcx GHSA-jg4j-hqh7-5qcx 2026-10-21T06:59:25.451189+00:00

The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.

 https://cve.radiocsirt.org/vuln/gsd-2014-0166 gsd-2014-0166 2026-10-21T06:59:25.451204+00:00 gsd-2014-0166 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0166 Withdrawn: UBUNTU-CVE-2014-0166 2026-10-21T06:59:25.451215+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: wordpress

The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.