Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authentication of administrators for requests that change the script compression option.
Max Base Score | 8.8 |
Published | 2016-08-07 |
Updated | 2017-11-04 |
EPSS | 0.13% |
1 vulnerabilities found