Description

WordPress is prone to multiple username enumeration weaknesses because it displays different responses to requests depending on whether or not the username exists. Attackers may exploit these weaknesses to discern valid usernames, which may aid them in brute-force password cracking or other attacks. WordPress versions prior to 2.8.1 are vulnerable.

Remediation

Update to WordPress version 2.8.1 or latest

References

http://www.coresecurity.com/content/WordPress-Privileges-Unchecked

http://www.exploit-db.com/exploits/9110/

http://www.securityfocus.com/archive/1/504795

Related Vulnerabilities

WordPress Plugin WordPress Photo Gallery by Gallery Bank Cross-Site Scripting (3.0.228)

WordPress Plugin Swiss Toolkit For WP Security Bypass (1.0.8)

Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-5515)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7908)

Jenkins Incorrect Authorization Vulnerability (CVE-2021-21670)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update CWE-16 CVE-2009-2335 CVE-2009-2336