Lucene search
NacinPATCHSTACK:769DE8729F332D85437F211634565154HistoryJan 20, 2014 - 12:00 a.m.
WordPress <= 3.0.0
2014-01-2000:00:00
nacin
patchstack.com
6
EPSS
0.002
Percentile
58.8%
A WordPress multi-site installation, permanently retains the “site administrators can add users” option once changed which might allow authenticated administrators to bypass intended access restrictions in opportunistic circumstances via an “add” action after a temporary change.
Solution
Update WordPress.
Related
nvd
nvd
CVE-2010-5297
2014-01-21 01:55:03
debiancve
debiancve
CVE-2010-5297
2014-01-21 01:55:03
wpvulndb
wpvulndb
WordPress 2.0 - 3.0 Remote Authenticated Administrator Add Action Bypass
2014-08-01 10:58:24
openvas
openvas
WordPress < 3.0.1 Access Restriction Bypass Vulnerability
2022-12-08 00:00:00
cve
cve
CVE-2010-5297
2014-01-21 01:55:03
nessus
nessus
WordPress < 3.0.1 Security Bypass
2014-03-12 00:00:00
ubuntucve
ubuntucve
CVE-2010-5297
2014-01-21 00:00:00
prion
prion
Design/Logic Flaw
2014-01-21 01:55:00
cvelist
cvelist
CVE-2010-5297
2014-01-21 01:00:00