High severity7.5NVD Advisory· Published Jun 29, 2016· Updated May 6, 2026
CVE-2016-5837
CVE-2016-5837
Description
WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors.
Affected products
1- cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*Range: <=4.5.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- codex.wordpress.org/Version_4.5.3nvdPatch
- wordpress.org/news/2016/06/wordpress-4-5-3/nvdPatchVendor Advisory
- www.securitytracker.com/id/1036163nvdThird Party Advisory
- www.debian.org/security/2016/dsa-3639nvd
- www.securityfocus.com/bid/91365nvd
- wpvulndb.com/vulnerabilities/8520nvd
News mentions
0No linked articles in our index yet.