Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Use of a Broken or Risky Cryptographic Algorithm Vulnerability - CVE-2007-6013 - Vulnerability Database
WordPress

WordPress Use of a Broken or Risky Cryptographic Algorithm Vulnerability - CVE-2007-6013

Critical
Reference: CVE-2007-6013
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-6013
Title: WordPress Use of a Broken or Risky Cryptographic Algorithm Vulnerability
Overview:

Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash which allows attackers to bypass authentication by obtaining the MD5 hash from the user database then generating the authentication cookie from that hash.