CVE-2012-5868

CVE-2012-5868 describes a vulnerability in WordPress 3.4.2 where an administrator's session cookie (wordpress_sec) is not invalidated upon logout. This flaw allows remote attackers to potentially discover valid session identifiers through brute-force attacks or modify data via replay attacks. The vulnerability has a low CVSS score of 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N), indicating network access, high attack complexity, and partial impact on confidentiality with no impact on integrity or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.