CVE-2017-8875: CSRF
Published May 10, 2017
·Updated
CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logout redirect URL.
Affected Software
1 affected component
codection Clean Login Wordpress=1.7.12
Remediation
Patch Available
Event History
May 10, 2017
CVE Published
via MITRE·05:14 AM
Data Sourced
via MITRE·05:14 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-8875?
CVE-2017-8875 has a medium severity rating due to its potential impact on authentication processes.
2
How do I fix CVE-2017-8875?
To fix CVE-2017-8875, update the Clean Login plugin to version 1.8 or later.
3
What type of vulnerability is CVE-2017-8875?
CVE-2017-8875 is a Cross-Site Request Forgery (CSRF) vulnerability.
4
Who is affected by CVE-2017-8875?
Users of the Clean Login plugin for WordPress versions before 1.8 are affected by CVE-2017-8875.
5
What can attackers do with CVE-2017-8875?
Attackers can change the login or logout redirect URLs using CVE-2017-8875.