WordPress: Privilege escalation

WordPress: Privilege escalation A flaw in WordPress allows registered WordPress users to elevate privileges. wordpress August 10, 2006 December 13, 2006: 02 142142 remote 2.0.4 2.0.4

WordPress is a PHP and MySQL based multiuser blogging system.

The WordPress developers have confirmed a vulnerability in capability checking for plugins.

By exploiting a flaw, a user can circumvent WordPress access restrictions when using plugins. The actual impact depends on the configuration of WordPress and may range from trivial to critical, possibly even the execution of arbitrary PHP code.

There is no known workaround at this time.

All WordPress users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=www-apps/wordpress-2.0.4"

CVE-2006-3389 CVE-2006-3390 CVE-2006-4028 jaervosz dizzutch frilled