CVE-2012-3384: CSRF
Published Jul 22, 2012
·Updated
Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
85 affected components
WordPress<=3.4.0
WordPress=0.71
WordPress=1.0
WordPress=1.0.1
WordPress=1.0.2
WordPress=1.1.1
WordPress=1.2
WordPress=1.2.1
WordPress=1.2.2
WordPress=1.2.3
WordPress=1.2.4
WordPress=1.2.5
WordPress=1.2.5-a
WordPress=1.3
WordPress=1.3.2
WordPress=1.3.3
WordPress=1.5
WordPress=1.5.1
WordPress=1.5.1.1
WordPress=1.5.1.2
WordPress=1.5.1.3
WordPress=1.5.2
WordPress=2.0
WordPress=2.0.1
WordPress=2.0.2
WordPress=2.0.4
WordPress=2.0.5
WordPress=2.0.6
WordPress=2.0.7
WordPress=2.0.8
WordPress=2.0.9
WordPress=2.0.10
WordPress=2.0.11
WordPress=2.1
WordPress=2.1.1
WordPress=2.1.2
WordPress=2.1.3
WordPress=2.2
WordPress=2.2.1
WordPress=2.2.2
WordPress=2.2.3
WordPress=2.3
WordPress=2.3.1
WordPress=2.3.2
WordPress=2.3.3
WordPress=2.5
WordPress=2.5.1
WordPress=2.6
WordPress=2.6.1
WordPress=2.6.2
WordPress=2.6.3
WordPress=2.6.5
WordPress=2.7
WordPress=2.7.1
WordPress=2.8
WordPress=2.8.1
WordPress=2.8.2
WordPress=2.8.3
WordPress=2.8.4
WordPress=2.8.4-a
WordPress=2.8.5
WordPress=2.8.5.1
WordPress=2.8.5.2
WordPress=2.8.6
WordPress=2.9
WordPress=2.9.1
WordPress=2.9.1.1
WordPress=2.9.2
WordPress=3.0
WordPress=3.0.1
WordPress=3.0.2
WordPress=3.0.3
WordPress=3.0.4
WordPress=3.0.5
WordPress=3.0.6
WordPress=3.1
WordPress=3.1.1
WordPress=3.1.2
WordPress=3.1.3
WordPress=3.1.4
WordPress=3.2
WordPress=3.2.1
WordPress=3.3
WordPress=3.3.2
WordPress=3.3.3
Event History
Jul 22, 2012
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3384?
CVE-2012-3384 is classified as a moderate severity vulnerability due to its potential for cross-site request forgery (CSRF) attacks.
2
How do I fix CVE-2012-3384?
To fix CVE-2012-3384, update your WordPress installation to version 3.4.1 or later.
3
What versions of WordPress are affected by CVE-2012-3384?
CVE-2012-3384 affects all WordPress versions prior to 3.4.1.
4
What type of attack does CVE-2012-3384 enable?
CVE-2012-3384 enables remote attackers to perform cross-site request forgery (CSRF) attacks, potentially hijacking user authentication.
5
Who is at risk for CVE-2012-3384?
Users of affected WordPress versions prior to 3.4.1 are at risk, particularly those with the customizer feature enabled.