QwikSec

Security Database

CVE

CWE

Training

CVE-2015-5715

Published: May 22, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

https://security-tracker.debian.org/tracker/CVE-2015-5715

x_refsource_CONFIRM

https://codex.wordpress.org/Version_4.3.1

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

https://wordpress.org/news/2015/09/wordpress-4-3-1/

x_refsource_CONFIRM

https://github.com/WordPress/WordPress/commit/9c57f3a4291f2311ae05f22c10eedeb0f69337ab

x_refsource_CONFIRM

https://wpvulndb.com/vulnerabilities/8188

x_refsource_MISC

vdb-entry

x_refsource_SECTRACK

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.