Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2016-5837

WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors.

VectorNETWORK

PublishedJun 29, 2016, 14:10

Published Bysecurity@debian.org

Base Score

Score7.5

Affected Versions

No affected versions found.

References

http://www.debian.org/security/2016/dsa-3639
http://www.securityfocus.com/bid/91365
http://www.securitytracker.com/id/1036163
https://codex.wordpress.org/Version_4.5.3
https://wordpress.org/news/2016/06/wordpress-4-5-3/
https://wpvulndb.com/vulnerabilities/8520

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Base SeverityHigh

Version

3.0

Attack Vector (AV)

NETWORK