Lucene search
Veracode Vulnerability DatabaseVERACODE:27741HistoryNov 03, 2020 - 7:12 a.m.
Privilege Escalation
2020-11-0307:12:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
wordpress
xml-rpc
privilege escalation
unauthorized access
confidential resources
EPSS
0.005
Percentile
76.1%
wordpress is vulnerable to privilege escalation. The XML-RPC is insecure and allows a user to gain privileges and unauthorized access to confidential resources.
References
lists.debian.org/debian-lts-announce/2020/11/msg00004.html
lists.fedoraproject.org/archives/list/[email protected]/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/
lists.fedoraproject.org/archives/list/[email protected]/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/
lists.fedoraproject.org/archives/list/[email protected]/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/
wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/
www.debian.org/security/2020/dsa-4784
Related
cvelist
cvelist
CVE-2020-28035
2020-10-31 00:58:32
ubuntucve
ubuntucve
CVE-2020-28035
2020-11-02 00:00:00
prion
prion
Design/Logic Flaw
2020-11-02 21:15:00
osv
osv
BIT-wordpress-2020-28035
2024-03-06 11:11:40
CVE-2020-28035
2020-11-02 21:15:30
BIT-wordpress-multisite-2020-28035
2024-03-06 11:11:30
nvd
nvd
CVE-2020-28035
2020-11-02 21:15:30
debiancve
debiancve
CVE-2020-28035
2020-11-02 21:15:30
cve
cve
CVE-2020-28035
2020-11-02 21:15:30
wpvulndb
wpvulndb
WordPress < 5.5.2 - XML-RPC Privilege Escalation
2020-10-29 00:00:00
nessus
nessus
WordPress < 5.5.2 Multiple Vulnerabilities
2020-11-04 00:00:00
Debian DLA-2429-1 : wordpress security update
2020-11-06 00:00:00
Fedora 33 : wordpress (2020-a764b11b52)
2020-11-12 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: wordpress-5.5.3-1.fc32
2020-11-11 01:21:28
[SECURITY] Fedora 31 Update: wordpress-5.5.3-1.fc31
2020-11-11 01:32:19
[SECURITY] Fedora 33 Update: wordpress-5.5.3-1.fc33
2020-11-11 01:20:58
debian
debian
[SECURITY] [DSA 4784-1] wordpress security update
2020-11-06 13:39:18
[SECURITY] [DSA 4784-1] wordpress security update
2020-11-06 13:39:18
[SECURITY] [DLA 2429-1] wordpress security update
2020-11-03 07:19:50
archlinux
archlinux
[ASA-202011-3] wordpress: multiple issues
2020-11-03 00:00:00
openvas
openvas
Fedora: Security Advisory for wordpress (FEDORA-2020-15e15c35da)
2020-11-11 00:00:00
Debian: Security Advisory (DLA-2429-1)
2020-11-04 00:00:00
WordPress Multiple Vulnerabilities (Oct 2020) - Linux
2020-11-02 00:00:00