Description

WordPress is prone to an unauthorized access vulnerability. Attackers can exploit this issue to edit other users' posts. Successfully exploiting this issue may lead to other attacks. WordPress versions prior to 2.3.3 are vulnerable.

Remediation

Update to WordPress version 2.3.3 or latest

References

http://www.village-idiot.org/archives/2008/02/02/wordpress-232-exploit-confirmed/

http://www.securiteam.com/unixfocus/5HP010KNFK.html

http://secunia.com/advisories/28823/

https://wordpress.org/news/2008/02/wordpress-233/

Related Vulnerabilities

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5397)

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile PHP Object Injection (2.3.2.1)

MySQL CVE-2019-2695 Vulnerability (CVE-2019-2695)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-13449)

WordPress Plugin All-in-One WP Migration Security Bypass (7.14)

Severity

High

Classification

CVE-2008-0664 CWE-264 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update