CVE-2014-0166
- Source
- https://cve.org/CVERecord?id=CVE-2014-0166
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-0166.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2014-0166
- Downstream
- Published
- 2014-04-10T00:55:09Z
- Modified
- 2026-04-16T06:24:23.049369301Z
- Summary
- [none]
- Details
-
The wpvalidateauth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.
- References