WordPress Security Bypass And Unspecified Vulnerabilities

Bugtraq ID:	55455
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 07 2012 12:00AM
Updated:	Sep 17 2012 09:10PM
Credit:	The vendor reported these issues.
Vulnerable:	WordPress WordPress 3.3.2 WordPress WordPress 3.2.2 WordPress WordPress 3.1.4 WordPress WordPress 3.1.3 WordPress WordPress 3.1.2 WordPress WordPress 3.1.1 WordPress WordPress 3.0.5 WordPress WordPress 3.0.4 WordPress WordPress 3.0.3 WordPress WordPress 3.0.2 WordPress WordPress 3.3.1 WordPress WordPress 3.3 WordPress WordPress 3.2-RC3 WordPress WordPress 3.2-RC1 WordPress WordPress 3.1.3 WordPress WordPress 3.1 WordPress WordPress 3.0.6 WordPress WordPress 3.0.4 WordPress WordPress 3.0.3 WordPress WordPress 3.0.2 WordPress WordPress 3.0.1 WordPress WordPress 3.0
Not Vulnerable:

WordPress Security Bypass And Unspecified Vulnerabilities

WordPress is prone to a security-bypass vulnerability and an unspecified vulnerability

Remote attackers can exploit the security-bypass issue to bypass certain security restrictions. The impact of the second issue is unspecified.

Versions prior to WordPress 3.4.2 are vulnerable.

WordPress Security Bypass And Unspecified Vulnerabilities

Attackers can exploit the issues by enticing an unsuspecting user to visit a crafted webpage.

WordPress Security Bypass And Unspecified Vulnerabilities

Solution:
Updates are available. Please see the references for details.

WordPress Security Bypass And Unspecified Vulnerabilities

References:

• WordPress Homepage (WordPress)