High severity7.5NVD Advisory· Published Jun 29, 2016· Updated May 6, 2026
CVE-2016-5838
CVE-2016-5838
Description
WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie.
Affected products
1- cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*Range: <=4.5.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- wordpress.org/news/2016/06/wordpress-4-5-3/nvdPatchVendor Advisory
- www.securitytracker.com/id/1036163nvdThird Party Advisory
- www.debian.org/security/2016/dsa-3639nvd
- www.securityfocus.com/bid/91367nvd
- codex.wordpress.org/Version_4.5.3nvd
- wpvulndb.com/vulnerabilities/8524nvd
News mentions
0No linked articles in our index yet.