VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 14, 2012· Updated Jun 16, 2026

CVE-2010-5106

CVE-2010-5106

Description

The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, and publish, edit, or delete posts, by leveraging the Author or Contributor role.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

71
  • WordPress/WordPress71 versions
    cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*+ 70 more
    • cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*range: <=3.0.2
    • cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.7:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8.4:a:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.8.6:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.9:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.9.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:2.9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:wordpress:wordpress:3.0.1:*:*:*:*:*:*:*
    • (no CPE)range: <3.0.3
    Package: https://wordpress.org/plugins/wordpress

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.