← All advisories

High severity7.5NVD Advisory· Published Jun 29, 2016· Updated Jun 17, 2026

CVE-2016-5838

CVE-2016-5838

Description

WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/WordPress2 versions
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*range: <=4.5.2
- (no CPE)range: <4.5.3
Package: https://wordpress.org/plugins/wordpress

Patches

Vulnerability mechanics

References

6

wordpress.org/news/2016/06/wordpress-4-5-3/nvdPatchVendor Advisory
www.securitytracker.com/id/1036163nvdThird Party Advisory
www.debian.org/security/2016/dsa-3639nvd
www.securityfocus.com/bid/91367nvd
codex.wordpress.org/Version_4.5.3nvd
wpvulndb.com/vulnerabilities/8524nvd

News mentions

0

No linked articles in our index yet.