WordPress 3.4.x < 3.4.2 XSS / Access Restriction Bypass Vulnerability

WordPress is prone to a cross-site scripting XSS and access restriction bypass vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

WordPress < 3.4.1 Multiple Vulnerabilities

Binary data 9114.prm...

CVE-2012-3383

The mapmetacap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not properly assign the unfilteredhtml capability, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting X...

CVE-2012-3383

The CVE-2012-3383 issue affects WordPress 3.4.x prior to 3.4.2. The root cause is in map_meta_cap within wp-includes/capabilities.php: when multisite is enabled, unfiltered_html is not properly assigned, letting remote authenticated users bypass access controls and perform cross-site scripting (X...