Is CVE-2008-5113 actively exploited?

No active exploitation of CVE-2008-5113 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2008-5113 be exploited remotely?

Yes. CVE-2008-5113 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2008-5113?

CVE-2008-5113 has a CVSS score of 4.0 (MEDIUM).

HOME VULNERABILITIESCVE-2008-5113

MEDIUM

CVE-2008-5113

CWE-352Published: November 17, 2008· Updated: Jun 16, 2026

4.0

CVSS v3.1

Official Description

WordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which makes it easier for remote attackers to conduct delayed and persistent cross-site request forgery (CSRF) attacks via crafted cookies, as demonstrated by attacks that (1) delete user accounts or (2) cause a denial of service (loss of application access). NOTE: this issue relies on the presence of an independent vulnerability that allows cookie injection.

NVD Source

Technical Analysis

CVE-2008-5113 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.