High severity7.5NVD Advisory· Published Jun 29, 2016· Updated Jun 17, 2026
CVE-2016-5837
CVE-2016-5837
Description
WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors.
Affected products
2cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*range: <=4.5.2
- (no CPE)range: <4.5.3
Patches
Vulnerability mechanics
References
6- codex.wordpress.org/Version_4.5.3nvdPatch
- wordpress.org/news/2016/06/wordpress-4-5-3/nvdPatchVendor Advisory
- www.securitytracker.com/id/1036163nvdThird Party Advisory
- www.debian.org/security/2016/dsa-3639nvd
- www.securityfocus.com/bid/91365nvd
- wpvulndb.com/vulnerabilities/8520nvd
News mentions
0No linked articles in our index yet.