CVE-2012-4448
EPSS 0.15%Published: 9/28/2012Modified: 5/27/2026
Description
Cross-site request forgery (CSRF) vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboard_incoming_links edit action.
Affected packages (1)
- Debian/wordpressfrom 0, < 3.5.1+dfsg-2