• info
• discussion
• exploit
• solution
• references

WordPress Predictable Cookie Generation Information Disclosure Vulnerability

WordPress is prone to an information-disclosure vulnerability because it generates author cookies in a predictable manner.

Attackers can exploit this issue to view unmoderated comments which could contain potentially sensitive information.

WordPress 2.2 and prior versions are vulnerable.