Lucene search
PRIOn knowledge basePRION:CVE-2015-5715HistoryMay 22, 2016 - 1:59 a.m.
Design/Logic Flaw
2016-05-2201:59:00
PRIOn knowledge base
www.prio-n.com
10
The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors.
References
www.debian.org/security/2015/dsa-3375
www.debian.org/security/2015/dsa-3383
www.securityfocus.com/bid/76748
www.securitytracker.com/id/1033979
codex.wordpress.org/Version_4.3.1
github.com/WordPress/WordPress/commit/9c57f3a4291f2311ae05f22c10eedeb0f69337ab
security-tracker.debian.org/tracker/CVE-2015-5715
wordpress.org/news/2015/09/wordpress-4-3-1/
wpvulndb.com/vulnerabilities/8188
Related
wpvulndb
wpvulndb
WordPress <= 4.3 - Publish Post & Mark as Sticky Permission Issue
2015-09-15 00:00:00
cvelist
cvelist
CVE-2015-5715
2016-05-22 01:00:00
cve
cve
CVE-2015-5715
2016-05-22 01:59:02
patchstack
patchstack
WordPress <= 4.3.0 - BYPASS
2015-08-02 00:00:00
nvd
nvd
CVE-2015-5715
2016-05-22 01:59:02
debiancve
debiancve
CVE-2015-5715
2016-05-22 01:59:02
ubuntucve
ubuntucve
CVE-2015-5715
2016-05-22 00:00:00
openvas
openvas
Fedora Update for wordpress FEDORA-2015-15982
2015-09-26 00:00:00
Debian Security Advisory DSA 3375-1 (wordpress - security update)
2015-10-19 00:00:00
Fedora Update for wordpress FEDORA-2015-15981
2015-09-26 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: wordpress-4.3.1-1.fc23
2015-09-25 08:54:37
[SECURITY] Fedora 21 Update: wordpress-4.3.1-1.fc21
2015-09-25 12:21:08
[SECURITY] Fedora 22 Update: wordpress-4.3.1-1.fc22
2015-09-25 10:57:35
nessus
nessus
Fedora 21 : wordpress-4.3.1-1.fc21 (2015-15982)
2015-09-28 00:00:00
Debian DLA-321-1 : wordpress security update
2015-10-01 00:00:00
Fedora 23 : wordpress-4.3.1-1.fc23 (2015-15983)
2015-09-28 00:00:00
debian
debian
[SECURITY] [DSA 3375-1] wordpress security update
2015-10-19 20:18:06
[SECURITY] [DLA 321-1] wordpress security update
2015-09-30 12:53:06
[SECURITY] [DSA 3383-1] wordpress security update
2015-10-29 20:02:31
mageia
mageia
Updated wordpress package fixes security vulnerabilities
2015-09-17 21:02:40
archlinux
archlinux
wordpress: multiple issues
2015-09-21 00:00:00
wordpress: multiple issues
2015-10-30 00:00:00
lldpd: denial of service
2015-10-30 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3375-1] wordpress security update
2015-10-26 00:00:00
freebsd
freebsd
wordpress -- multiple vulnerabilities
2015-09-15 00:00:00
osv
osv
wordpress - security update
2015-10-19 00:00:00
wordpress - security update
2015-09-30 00:00:00
wordpress - security update
2015-10-29 00:00:00