High severity7.5NVD Advisory· Published Jun 29, 2016· Updated May 6, 2026
CVE-2016-5835
CVE-2016-5835
Description
WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.php and wp-admin/revision.php.
Affected products
1- cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*Range: <=4.5.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- wordpress.org/news/2016/06/wordpress-4-5-3/nvdPatchVendor Advisory
- www.securitytracker.com/id/1036163nvdThird Party Advisory
- codex.wordpress.org/Version_4.5.3nvdRelease Notes
- www.debian.org/security/2016/dsa-3639nvd
- www.securityfocus.com/bid/91366nvd
- github.com/WordPress/WordPress/commit/a2904cc3092c391ac7027bc87f7806953d1a25a1nvd
- wpvulndb.com/vulnerabilities/8519nvd
News mentions
0No linked articles in our index yet.