CVE-2016-6635

Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for requests that change the script compression option.

• CWE-352

• http://codex.wordpress.org/Version_4.5Release Notes
• http://www.debian.org/security/2016/dsa-3681
• https://github.com/WordPress/WordPress/commit/9b7a7754133c50b82bd9d976fb5b24094f658aabPatch
• https://wpvulndb.com/vulnerabilities/8475Third Party Advisory, VDB Entry
• http://codex.wordpress.org/Version_4.5Release Notes
• http://www.debian.org/security/2016/dsa-3681
• https://github.com/WordPress/WordPress/commit/9b7a7754133c50b82bd9d976fb5b24094f658aabPatch
• https://wpvulndb.com/vulnerabilities/8475Third Party Advisory, VDB Entry

Published

Aug 7, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6629An issue was discovered in phpMyAdmin involving the $cfg['Ar…
• CVE-2016-6630An issue was discovered in phpMyAdmin. An authenticated user…
• CVE-2016-6631An issue was discovered in phpMyAdmin. A user can execute a …
• CVE-2016-6632An issue was discovered in phpMyAdmin where, under certain c…
• CVE-2016-6633An issue was discovered in phpMyAdmin. phpMyAdmin can be use…
• CVE-2016-6634Cross-site scripting (XSS) vulnerability in the network sett…
• CVE-2016-6636The OAuth authorization implementation in Pivotal Cloud Foun…
• CVE-2016-6637Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2016-6638Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-6639Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.1…7.5
• CVE-2016-6640Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-6641Cross-site scripting (XSS) vulnerability in EMC ViPR SRM bef…