WordPress 2.3.2 Post Edit Unauthorized Access Vulnerability (0.7 - 2.3.2) - Vulnerabilities

Description

WordPress is prone to an unauthorized access vulnerability. Attackers can exploit this issue to edit other users' posts. Successfully exploiting this issue may lead to other attacks. WordPress versions prior to 2.3.3 are vulnerable.

Remediation

Update to WordPress version 2.3.3 or latest

References

http://www.village-idiot.org/archives/2008/02/02/wordpress-232-exploit-confirmed/

http://www.securiteam.com/unixfocus/5HP010KNFK.html

http://secunia.com/advisories/28823/

https://wordpress.org/news/2008/02/wordpress-233/

Related Vulnerabilities

XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2002-2391)

WordPress Plugin PowerPress Podcasting by Blubrry Cross-Site Scripting (10.0)

OpenSSL Resource Management Errors Vulnerability (CVE-2014-3506)

WordPress Plugin Banner Effect Header Cross-Site Scripting (1.2.7)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3065)

Severity

High

Classification

CVE-2008-0664 CWE-264 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

WordPress 2.3.2 Post Edit Unauthorized Access Vulnerability (0.7 - 2.3.2)