CVE-2014-9037
Fixed in a distro release EPSS 3%
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash.
Products: mageia_project mageia, wordpress, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wordpress | 4.0.1+dfsg-1 |
| Debian 13 | wordpress | 4.0.1+dfsg-1 |
| Debian 14 | wordpress | 4.0.1+dfsg-1 |
| Debian 6.0 | wordpress | 3.6.1+dfsg-1~deb6u6 |
| Debian 7 | wordpress | 3.6.1+dfsg-1~deb7u5 |