WordPress 'press-this.php' Remote Security Bypass Vulnerability
BID:47598
Info
WordPress 'press-this.php' Remote Security Bypass Vulnerability
| Bugtraq ID: | 47598 |
| Class: | Access Validation Error |
| CVE: |
CVE-2011-5270 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 27 2011 12:00AM |
| Updated: | Jan 31 2014 02:34AM |
| Credit: | Andrew Nacin of WordPress and Benjamin Balter. |
| Vulnerable: |
WordPress WordPress 3.1.1 WordPress WordPress 3.0.5 WordPress WordPress 3.0.4 WordPress WordPress 3.0.3 WordPress WordPress 3.0.2 WordPress WordPress 2.9.2 WordPress WordPress 2.9.1 WordPress WordPress 2.8.6 WordPress WordPress 2.8.5 WordPress WordPress 2.8.4 WordPress WordPress 2.8.3 WordPress WordPress 2.8.2 WordPress WordPress 2.8.1 WordPress WordPress 2.6.5 WordPress WordPress 2.6.2 WordPress WordPress 2.6.1 WordPress WordPress 2.5.1 WordPress WordPress 2.3.3 WordPress WordPress 2.3.2 WordPress WordPress 2.3.1 WordPress WordPress 2.2.3 WordPress WordPress 2.2.2 WordPress WordPress 2.2.1 WordPress WordPress 2.1.3 WordPress WordPress 2.1.2 WordPress WordPress 2.1.1 WordPress WordPress 2.0.11 WordPress WordPress 2.0.10 WordPress WordPress 2.0.7 WordPress WordPress 2.0.6 WordPress WordPress 2.0.5 WordPress WordPress 2.0.4 WordPress WordPress 2.0.3 WordPress WordPress 2.0.2 WordPress WordPress 2.0.1 WordPress WordPress 2.0 WordPress WordPress 1.5.2 WordPress WordPress 1.5.1 .3 WordPress WordPress 1.5.1 .2 WordPress WordPress 1.5.1 WordPress WordPress 1.5 WordPress WordPress 1.3.1 WordPress WordPress 1.2.2 WordPress WordPress 1.2.1 WordPress WordPress 1.2 WordPress WordPress 0.71 WordPress WordPress 0.7 WordPress WordPress 3.1 WordPress WordPress 3.0.1 WordPress WordPress 2.9 WordPress WordPress 2.8 WordPress WordPress 2.6 WordPress WordPress 2.5 WordPress WordPress 2.3 WordPress WordPress 2.2 Revision 5003 WordPress WordPress 2.2 Revision 5002 WordPress WordPress 2.2 WordPress WordPress 2.1.3-RC2 WordPress WordPress 2.1.3-RC1 WordPress WordPress 2.1 WordPress WordPress 2.0.10-RC2 WordPress WordPress 2.0.10-RC1 |
| Not Vulnerable: |
WordPress WordPress 3.1.2 WordPress WordPress 3.0.6 |
Discussion
WordPress 'press-this.php' Remote Security Bypass Vulnerability
WordPress is prone to a security-bypass vulnerability because the application fails to properly perform user-profile checks.
Remote attackers can exploit this issue to improperly publish posts under certain circumstances.
Note that successful exploitation requires 'Contributor-level' privileges.
WordPress versions prior to 3.1.2 are vulnerable.
WordPress is prone to a security-bypass vulnerability because the application fails to properly perform user-profile checks.
Remote attackers can exploit this issue to improperly publish posts under certain circumstances.
Note that successful exploitation requires 'Contributor-level' privileges.
WordPress versions prior to 3.1.2 are vulnerable.
Exploit / POC
WordPress 'press-this.php' Remote Security Bypass Vulnerability
Attackers can exploit this issue via a web browser.
Attackers can exploit this issue via a web browser.
Solution / Fix
WordPress 'press-this.php' Remote Security Bypass Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
WordPress 'press-this.php' Remote Security Bypass Vulnerability
References:
References:
- Email Newsletter plugin Homepage (WordPress)
- Wordpress 3.1.2 Changeset (WordPress)
- Wordpress 3.1.2 Release Notes (WordPress)