WordPress <= 4.3.0 - BYPASS

The vulnerability is in the XMLRPC subsystem, in wp-includes/class-wp-xmlrpc-server.php. It allows an authenticated user to bypass intended access restrictions via unspecified vectors.

Solution

           Update WordPress.