CVE-2012-3384

no score yetEPSS 1.2%

Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2012-07-22
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

wordpress:wordpress

References

http://codex.wordpress.org/Version_3.4.1
http://www.openwall.com/lists/oss-security/2012/07/02/1
http://www.openwall.com/lists/oss-security/2012/07/08/1
http://codex.wordpress.org/Version_3.4.1
http://www.openwall.com/lists/oss-security/2012/07/02/1

Check your stack JSON