CVE-2010-5297: Low severity WordPress vulnerability
WordPress before 3.0.1, when a Multisite installation is used, permanently retains the "site administrators can add users" option once changed, which might allow remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances via an add action after a temporary change.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-5297?
CVE-2010-5297 has been rated as a medium severity vulnerability due to its potential to allow unauthorized user access.
How do I fix CVE-2010-5297?
To fix CVE-2010-5297, upgrade your WordPress installation to version 3.0.1 or later.
What versions of WordPress are affected by CVE-2010-5297?
CVE-2010-5297 affects various versions of WordPress prior to 3.0.1, including 2.0.x and 2.8.x.
What type of vulnerability is CVE-2010-5297?
CVE-2010-5297 is an access control vulnerability that allows remote authenticated administrators to bypass intended restrictions.
Can CVE-2010-5297 be exploited easily?
Yes, CVE-2010-5297 can be exploited under opportunistic circumstances where an attacker has administrative access.