Strix
26.1K

CVE-2012-1936

UnknownEPSS 2.88%

Last modified

CVE-2012-1936 is a vulnerability of currently unknown severity. The wp_create_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a user session, which might make it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks on specific actions and objects by sniffing the network, as demonstrated by attacks against the wp-admin/admin-ajax.php and wp-admin/user-new.php scripts. NOTE: the vendor reportedly disputes the significance of this issue because wp_create_nonce operates as intended, even if it is arguably inconsistent with certain CSRF protection details advocated by external organizations. EPSS estimates a 2.88% chance of exploitation in the next 30 days.

Description

The wp_create_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a user session, which might make it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks on specific actions and objects by sniffing the network, as demonstrated by attacks against the wp-admin/admin-ajax.php and wp-admin/user-new.php scripts. NOTE: the vendor reportedly disputes the significance of this issue because wp_create_nonce operates as intended, even if it is arguably inconsistent with certain CSRF protection details advocated by external organizations

Metrics

EPSS Probability
2.88%

85.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
WordpressWordpress<= 3.3.1—
WordpressWordpress1.0—
WordpressWordpress1.0.1—
WordpressWordpress1.0.2—
WordpressWordpress1.1.1—
WordpressWordpress1.2—
WordpressWordpress1.2.1—
WordpressWordpress1.2.2—
WordpressWordpress1.2.3—
WordpressWordpress1.2.4—
WordpressWordpress1.2.5—
WordpressWordpress1.3—
WordpressWordpress1.3.2—
WordpressWordpress1.3.3—
WordpressWordpress1.5—
WordpressWordpress1.5.1—
WordpressWordpress1.5.1.1—
WordpressWordpress1.5.1.2—
WordpressWordpress1.5.1.3—
WordpressWordpress1.5.2—
WordpressWordpress2.0—
WordpressWordpress2.0.1—
WordpressWordpress2.0.2—
WordpressWordpress2.0.4—
WordpressWordpress2.0.5—
WordpressWordpress2.0.6—
WordpressWordpress2.0.7—
WordpressWordpress2.0.8—
WordpressWordpress2.0.9—
WordpressWordpress2.0.10—
WordpressWordpress2.0.11—
WordpressWordpress2.1—
WordpressWordpress2.1.1—
WordpressWordpress2.1.2—
WordpressWordpress2.1.3—
WordpressWordpress2.2—
WordpressWordpress2.2.1—
WordpressWordpress2.2.2—
WordpressWordpress2.2.3—
WordpressWordpress2.3—
WordpressWordpress2.3.1—
WordpressWordpress2.3.2—
WordpressWordpress2.3.3—
WordpressWordpress2.5—
WordpressWordpress2.5.1—
WordpressWordpress2.6—
WordpressWordpress2.6.1—
WordpressWordpress2.6.2—
WordpressWordpress2.6.3—
WordpressWordpress2.6.5—

Showing 50 of 80 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2012-1936?
The wp_create_nonce function in wp-includes/pluggable.php in WordPress 3.3.1 and earlier associates a nonce with a user account instead of a user session, which might make it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks on specific actions and objects by sniffing the network, as demonstrated by attacks against the wp-admin/admin-ajax.php and wp-admin/user-new.php scripts. NOTE: the vendor reportedly disputes the significance of this issue because wp_create_nonce operates as intended, even if it is arguably inconsistent with certain CSRF protection details advocated by external organizations
How severe is CVE-2012-1936?
Severity scoring for CVE-2012-1936 is pending analysis. The EPSS model estimates a 2.88% probability of exploitation in the next 30 days.
How do I fix CVE-2012-1936?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2012

View all 2012CVEs →

Are you affected by CVE-2012-1936?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST