| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress | = 3.8= 3.8.1= 3.8.2= 3.8.3= 3.8.4= 3.9= 3.9.1= 3.9.2= 4.0≤ 3.7.4 |
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free