WordPress does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0166
This vulnerability affects the following application versions:
- WordPress 3.0
- WordPress 3.0.1
- WordPress 3.0.2
- WordPress 3.0.3
- WordPress 3.0.4
- WordPress 3.0.5
- WordPress 3.0.6
- WordPress 3.1
- WordPress 3.1.1
- WordPress 3.1.2
- WordPress 3.1.3
- WordPress 3.1.4
- WordPress 3.2
- WordPress 3.2.1
- WordPress 3.3
- WordPress 3.3.1
- WordPress 3.3.2
- WordPress 3.3.3
- WordPress 3.4
- WordPress 3.4.1
- WordPress 3.4.2
- WordPress 3.5
- WordPress 3.5.1
- WordPress 3.5.2
- WordPress 3.6
- WordPress 3.6.1
- WordPress 3.7
- WordPress 3.7.1
- WordPress 3.8
- WordPress 3.8.1