| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress | = 3.4.2 |
WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free