CVE-2010-5106

CVE-2010-5106

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, and publish, edit, or delete posts, by leveraging the Author or Contributor role.

EPSS 2.2% · Fix available

Published

2012-09-14T19:00:00.000Z

Updated

2024-09-17T03:17:40.692Z

Stack: system

Check your server →