QwikSec

Security Database

CVE

CWE

Training

CVE-2010-5106

Published: Sep 14, 2012

Modified: Sep 17, 2024

PUBLISHED

Description

The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, and publish, edit, or delete posts, by leveraging the Author or Contributor role.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://codex.wordpress.org/Version_3.0.3

x_refsource_CONFIRM

[oss-security] 20120914 Re: CVE-request: WordPress insufficient permissions verification on XMLRPC interface

mailing-list

x_refsource_MLIST

http://core.trac.wordpress.org/changeset/16803

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.