WordPress Backdoor Unauthorized Access and Information Disclosure Vulnerabilities
BID:64482
Info
WordPress Backdoor Unauthorized Access and Information Disclosure Vulnerabilities
| Bugtraq ID: | 64482 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2013 12:00AM |
| Updated: | Dec 16 2013 12:00AM |
| Credit: | MustLive |
| Vulnerable: |
WordPress WordPress 3.7.1 WordPress WordPress 3.6.1 WordPress WordPress 3.6 WordPress WordPress 3.5.2 WordPress WordPress 3.5.1 WordPress WordPress 3.3.2 WordPress WordPress 3.2.2 WordPress WordPress 3.1.4 WordPress WordPress 3.1.3 WordPress WordPress 3.1.2 WordPress WordPress 3.1.1 WordPress WordPress 3.0.5 WordPress WordPress 3.0.4 WordPress WordPress 3.0.3 WordPress WordPress 3.0.2 WordPress WordPress 3.8 WordPress WordPress 3.5.0 WordPress WordPress 3.5 WordPress WordPress 3.4.2 WordPress WordPress 3.4.1 WordPress WordPress 3.4 WordPress WordPress 3.3.3 WordPress WordPress 3.3.1 WordPress WordPress 3.3 WordPress WordPress 3.2.1 WordPress WordPress 3.1 WordPress WordPress 3.0.6 WordPress WordPress 3.0.1 |
| Not Vulnerable: | |
Discussion
WordPress Backdoor Unauthorized Access and Information Disclosure Vulnerabilities
WordPress is prone to an unauthorized-access vulnerability and an information-disclosure vulnerability.
Successful exploits may allow an attacker to obtain sensitive information or gain unauthorized access to the affected application through backdoor. This may aid in further attacks.
WordPress is prone to an unauthorized-access vulnerability and an information-disclosure vulnerability.
Successful exploits may allow an attacker to obtain sensitive information or gain unauthorized access to the affected application through backdoor. This may aid in further attacks.
Exploit / POC
WordPress Backdoor Unauthorized Access and Information Disclosure Vulnerabilities
An attacker can use readily available tools to exploit these issues.
An attacker can use readily available tools to exploit these issues.
Solution / Fix
WordPress Backdoor Unauthorized Access and Information Disclosure Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
WordPress Backdoor Unauthorized Access and Information Disclosure Vulnerabilities
References:
References:
- Bug 1045416 - wordpress: information leakage and backdoor vulnerabilities in wri (Red Hat Bugzilla)
- Information Leakage and Backdoor vulnerabilities in WordPress (MustLive)
- WordPress HomePage (WordPress)