Security restrictions bypass in WordPress - CVE-2020-28035

Vulnerability identifier: #VU48036

CSH Severity: Medium

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-28035

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions on XML-RPC requests. A remote authenticated attacker can escalate privileges within the application by sending a specially crafted XML-RPC request.

WordPress
Arch Linux
Fedora
wordpress (Debian package)
wordpress

Install updates from vendor's website.

WordPress - addressed in versions 3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.7, 5.2.8, 5.3.5, 5.4.3, 5.5.2
wordpress (Debian package) - update to 5.0.11+dfsg1-0+deb10u1
wordpress - addressed in versions 5.1.8-1.el6, 5.1.8-1.el7, 5.5.3-1.fc31, 5.5.3-1.fc32, 5.5.3-1.fc33

• https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/

• Multiple vulnerabilities in WordPress
• Debian update for wordpress
• Arch Linux update for wordpress
• Fedora 31 update for wordpress
• Fedora 32 update for wordpress
• Fedora 33 update for wordpress
• Fedora EPEL 7 update for wordpress
• Fedora EPEL 6 update for wordpress