wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:39
Type | Values Removed | Values Added |
---|---|---|
References | () http://core.trac.wordpress.org/changeset/20526/branches/3.3/wp-admin/plugins.php - | |
References | () http://osvdb.org/81462 - | |
References | () http://secunia.com/advisories/48957 - | |
References | () http://secunia.com/advisories/49138 - | |
References | () http://wordpress.org/news/2012/04/wordpress-3-3-2/ - Patch, Vendor Advisory | |
References | () http://www.debian.org/security/2012/dsa-2470 - | |
References | () http://www.securityfocus.com/bid/53192 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/75090 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/75207 - |
Information
Published : 2012-04-21 23:55
Updated : 2024-11-21 01:39
NVD link : CVE-2012-2402
Mitre link : CVE-2012-2402
CVE.ORG link : CVE-2012-2402
JSON object : View
Products Affected
wordpress
- wordpress
CWE
CWE-264
Permissions, Privileges, and Access Controls