Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2010-5297
2.1
LOWCVSS v2
Published
January 21, 2014
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
WordPress before 3.0.1, when a Multisite installation is used, permanently retains the "site administrators can add users" option once changed, which might allow remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances via an add action after a temporary change.
WordPress/WordPress
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.= 2.8.5.2, = 2.0.11, = 2.8.6, = 2.0, = 2.1.1, = 2.2.3, = 2.0.2, = 2.1, = 2.0.6, = 2.0.7, = 2.0.9, = 2.6.3, = 2.0.5, = 2.1.2, = 2.2, = 2.3.3, = 2.6.5, = 2.7.1, = 2.0.1, = 2.2.2, = 2.8.1, = 2.8.3, = 2.8.4, = 2.0.4, = 2.1.3, = 2.8, = 2.0.8, = 2.5.1, = 2.6, = 2.6.1, = 2.6.2, = 2.9, = 2.9.1, = 2.9.1.1, = 2.3.1, = 2.8.5, = 2.9.2, = 2.0.10, = 2.2.1, = 2.3, = 2.8.2, = 2.3.2, = 2.5, = 2.7, = 2.8.5.1, <= 3.0NVD
wordpress
NPMA client for working with WordPress.
NPMA client for working with WordPress.= 2.8.5.2, = 2.0.11, = 2.8.6, = 2.0, = 2.1.1, = 2.2.3, = 2.0.2, = 2.1, = 2.0.6, = 2.0.7, = 2.0.9, = 2.6.3, = 2.0.5, = 2.1.2, = 2.2, = 2.3.3, = 2.6.5, = 2.7.1, = 2.0.1, = 2.2.2, = 2.8.1, = 2.8.3, = 2.8.4, = 2.0.4, = 2.1.3, = 2.8, = 2.0.8, = 2.5.1, = 2.6, = 2.6.1, = 2.6.2, = 2.9, = 2.9.1, = 2.9.1.1, = 2.3.1, = 2.8.5, = 2.9.2, = 2.0.10, = 2.2.1, = 2.3, = 2.8.2, = 2.3.2, = 2.5, = 2.7, = 2.8.5.1, <= 3.0
RubyGems