CVE-2014-9039
Fixed in a distro release EPSS 2%
wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message.
Products: debian_linux, mageia_project mageia, wordpress
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | wordpress | 4.0.1+dfsg-1 |
| Debian 13 | wordpress | 4.0.1+dfsg-1 |
| Debian 14 | wordpress | 4.0.1+dfsg-1 |
| Debian 6.0 | wordpress | 3.6.1+dfsg-1~deb6u6 |
| Debian 7 | wordpress | 3.6.1+dfsg-1~deb7u5 |