CVE-2013-2200
MEDIUM
4.0
CVSS 2.0
Description
WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reassignment via unspecified vectors.
Affected WordPress components
-
WordPress coreUp to and including 3.5.1; Version 0.71; Version 1.0; Version 1.0.1; Version 1.0.2; Version 1.1.1; Version 1.2; Version 1.2.1; Version 1.2.2; Version 1.2.3; Version 1.2.4; Version 1.2.5; Version 1.3; Version 1.3.2; Version 1.3.3; Version 1.5; Version 1.5.1; Version 1.5.1.1; Version 1.5.1.2; Version 1.5.1.3; Version 1.5.2; Version 1.6.2; Version 2.0; Version 2.0.1; Version 2.0.2; Version 2.0.4; Version 2.0.5; Version 2.0.6; Version 2.0.7; Version 2.0.8; Version 2.0.9; Version 2.0.10; Version 2.0.11; Version 2.1; Version 2.1.1; Version 2.1.2; Version 2.1.3; Version 2.2; Version 2.2.1; Version 2.2.2; Version 2.2.3; Version 2.3; Version 2.3.1; Version 2.3.2; Version 2.3.3; Version 2.5; Version 2.5.1; Version 2.6; Version 2.6.1; Version 2.6.2; Version 2.6.3; Version 2.6.5; Version 2.7; Version 2.7.1; Version 2.8; Version 2.8.1; Version 2.8.2; Version 2.8.3; Version 2.8.4; Version 2.8.5; Version 2.8.5.1; Version 2.8.5.2; Version 2.8.6; Version 2.9; Version 2.9.1; Version 2.9.1.1; Version 2.9.2; Version 3.3; Version 3.3.1; Version 3.3.2; Version 3.3.3; Version 3.4.0; Version 3.4.1; Version 3.4.2; Version 3.5.0
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- wordpress wordpress — Up to and including 3.5.1
- wordpress wordpress — Version 0.71
- wordpress wordpress — Version 1.0
- wordpress wordpress — Version 1.0.1
- wordpress wordpress — Version 1.0.2
- wordpress wordpress — Version 1.1.1
- wordpress wordpress — Version 1.2
- wordpress wordpress — Version 1.2.1
- wordpress wordpress — Version 1.2.2
- wordpress wordpress — Version 1.2.3
- wordpress wordpress — Version 1.2.4
- wordpress wordpress — Version 1.2.5
- wordpress wordpress — Version 1.3
- wordpress wordpress — Version 1.3.2
- wordpress wordpress — Version 1.3.3
- wordpress wordpress — Version 1.5
- wordpress wordpress — Version 1.5.1
- wordpress wordpress — Version 1.5.1.1
- wordpress wordpress — Version 1.5.1.2
- wordpress wordpress — Version 1.5.1.3
- wordpress wordpress — Version 1.5.2
- wordpress wordpress — Version 1.6.2
- wordpress wordpress — Version 2.0
- wordpress wordpress — Version 2.0.1
- wordpress wordpress — Version 2.0.2
- wordpress wordpress — Version 2.0.4
- wordpress wordpress — Version 2.0.5
- wordpress wordpress — Version 2.0.6
- wordpress wordpress — Version 2.0.7
- wordpress wordpress — Version 2.0.8
- wordpress wordpress — Version 2.0.9
- wordpress wordpress — Version 2.0.10
- wordpress wordpress — Version 2.0.11
- wordpress wordpress — Version 2.1
- wordpress wordpress — Version 2.1.1
- wordpress wordpress — Version 2.1.2
- wordpress wordpress — Version 2.1.3
- wordpress wordpress — Version 2.2
- wordpress wordpress — Version 2.2.1
- wordpress wordpress — Version 2.2.2
- wordpress wordpress — Version 2.2.3
- wordpress wordpress — Version 2.3
- wordpress wordpress — Version 2.3.1
- wordpress wordpress — Version 2.3.2
- wordpress wordpress — Version 2.3.3
- wordpress wordpress — Version 2.5
- wordpress wordpress — Version 2.5.1
- wordpress wordpress — Version 2.6
- wordpress wordpress — Version 2.6.1
- wordpress wordpress — Version 2.6.2
- wordpress wordpress — Version 2.6.3
- wordpress wordpress — Version 2.6.5
- wordpress wordpress — Version 2.7
- wordpress wordpress — Version 2.7.1
- wordpress wordpress — Version 2.8
- wordpress wordpress — Version 2.8.1
- wordpress wordpress — Version 2.8.2
- wordpress wordpress — Version 2.8.3
- wordpress wordpress — Version 2.8.4
- wordpress wordpress — Version 2.8.5
- wordpress wordpress — Version 2.8.5.1
- wordpress wordpress — Version 2.8.5.2
- wordpress wordpress — Version 2.8.6
- wordpress wordpress — Version 2.9
- wordpress wordpress — Version 2.9.1
- wordpress wordpress — Version 2.9.1.1
- wordpress wordpress — Version 2.9.2
- wordpress wordpress — Version 3.3
- wordpress wordpress — Version 3.3.1
- wordpress wordpress — Version 3.3.2
- wordpress wordpress — Version 3.3.3
- wordpress wordpress — Version 3.4.0
- wordpress wordpress — Version 3.4.1
- wordpress wordpress — Version 3.4.2
- wordpress wordpress — Version 3.5.0
References
- codex.wordpress.org http://codex.wordpress.org/Version_3.5.2
- wordpress.org http://wordpress.org/news/2013/06/wordpress-3-5-2/ Vendor Advisory
- www.debian.org http://www.debian.org/security/2013/dsa-2718
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=976784
- nvd.nist.gov Official NVD record