UpHeron
All vulnerabilities

WordPress core

CVE-2012-6707

WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. NOTE: the approach to changing this may not be fully compatible with certain use cases, such as migration of a WordPress site from a web host that uses a recent PHP version to a different web host that uses PHP 5.2.…

Severity
High 7.5
Published
19 Oct 2017
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Every version up to 4.8.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2012-6707
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2012-6707