Ettack/POC-CVE-2014-0166

PoC

POC of CVE-2014-0166 (WordPress cookie forgery vulnerability)

view exploit source poc_in_githubauthor Ettackpublished 2014-04-26catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-0166US	medium6.4	9.17% (95th)	Exploit	2014-04-10
The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookie…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.