Security restrictions bypass in WordPress - #VU61252

 

Security restrictions bypass in WordPress - #VU61252

Published: March 11, 2022


Vulnerability identifier: #VU61252
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: N/A
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: WordPress.ORG
Affected software:
WordPress

Detailed vulnerability description

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to unspecified errors that lead to security restrictions bypass. The vulnerability description will be updated to include more information once available.


Remediation

Install updates from vendor's website.

Sources