CVEvulnerability
CVE-2013-2200
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-07-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reassignment via unspecified vectors.
Affected configurations
• wordpress wordpress (<= 3.5.1)
• wordpress wordpress 0.71
• wordpress wordpress 1.0
• wordpress wordpress 1.0.1
• wordpress wordpress 1.0.2
• wordpress wordpress 1.1.1
• wordpress wordpress 1.2
• wordpress wordpress 1.2.1
• wordpress wordpress 1.2.2
• wordpress wordpress 1.2.3
• wordpress wordpress 1.2.4
• wordpress wordpress 1.2.5
• wordpress wordpress 1.3
• wordpress wordpress 1.3.2
• wordpress wordpress 1.3.3
• wordpress wordpress 1.5
• wordpress wordpress 1.5.1
• wordpress wordpress 1.5.1.1
• wordpress wordpress 1.5.1.2
• wordpress wordpress 1.5.1.3
• wordpress wordpress 1.5.2
• wordpress wordpress 1.6.2
• wordpress wordpress 2.0
• wordpress wordpress 2.0.1
• wordpress wordpress 2.0.2
• wordpress wordpress 2.0.4
• wordpress wordpress 2.0.5
• wordpress wordpress 2.0.6
• wordpress wordpress 2.0.7
• wordpress wordpress 2.0.8
• wordpress wordpress 2.0.9
• wordpress wordpress 2.0.10
• wordpress wordpress 2.0.11
• wordpress wordpress 2.1
• wordpress wordpress 2.1.1
• wordpress wordpress 2.1.2
• wordpress wordpress 2.1.3
• wordpress wordpress 2.2
• wordpress wordpress 2.2.1
• wordpress wordpress 2.2.2
• wordpress wordpress 2.2.3
• wordpress wordpress 2.3
• wordpress wordpress 2.3.1
• wordpress wordpress 2.3.2
• wordpress wordpress 2.3.3
• wordpress wordpress 2.5
• wordpress wordpress 2.5.1
• wordpress wordpress 2.6
• wordpress wordpress 2.6.1
• wordpress wordpress 2.6.2
• wordpress wordpress 2.6.3
• wordpress wordpress 2.6.5
• wordpress wordpress 2.7
• wordpress wordpress 2.7.1
• wordpress wordpress 2.8
• wordpress wordpress 2.8.1
• wordpress wordpress 2.8.2
• wordpress wordpress 2.8.3
• wordpress wordpress 2.8.4
• wordpress wordpress 2.8.5
… and 15 more
Related
Weakness · not in database (1)
References
- http://codex.wordpress.org/Version_3.5.2 codex.wordpress.org
- http://wordpress.org/news/2013/06/wordpress-3-5-2/ Vendor Advisory
- http://www.debian.org/security/2013/dsa-2718 www.debian.org
- https://bugzilla.redhat.com/show_bug.cgi?id=976784 bugzilla.redhat.com
- http://codex.wordpress.org/Version_3.5.2 codex.wordpress.org
- http://wordpress.org/news/2013/06/wordpress-3-5-2/ Vendor Advisory
- http://www.debian.org/security/2013/dsa-2718 www.debian.org
- https://bugzilla.redhat.com/show_bug.cgi?id=976784 bugzilla.redhat.com