ID CVE-2009-2335
Summary WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for "user convenience."
References
Vulnerable Configurations
  • cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:beta:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.71:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.71:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.72:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.72:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.72:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:beta:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.2.5:a:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:1.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:1.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.3:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.3:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.6:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.6:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.7:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.7:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.8:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.8:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.9:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.9:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.10:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.10:rc3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.0.11:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.0.11:rc3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:beta4:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:beta4:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.1.3:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.1.3:rc3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.1:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.1:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.1:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.2:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.2:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.2:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.2:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.2:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.2:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.2:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.2:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.2:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.2:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.5:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.5:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.5:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.5:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.5:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.5:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.5:rc3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.5:rc3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6.1:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6.1:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6.1:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6.1:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6.1:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6.1:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.7:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.7:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.7:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.7:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.7:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.7:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.7:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.7:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.7:beta3:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.7:beta3:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.7:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.7:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.7:rc2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.7:rc2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.8:-:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.8:-:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.8:beta1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.8:beta1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.8:beta2:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.8:beta2:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress:2.8:rc1:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress:2.8:rc1:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.3.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.3.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:1.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:1.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:2.6:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:2.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:2.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:2.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:2.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:2.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:2.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:2.7:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:2.7:*:*:*:*:*:*:*
  • cpe:2.3:a:wordpress:wordpress_mu:2.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:wordpress:wordpress_mu:2.7.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 08-11-2018 - 20:38)
Impact:
Exploitability:
CWE CWE-16
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 35581
bugtraq 20090708 CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information
exploit-db 9110
fedora
  • FEDORA-2009-7701
  • FEDORA-2009-7729
  • FEDORA-2009-8529
  • FEDORA-2009-8538
misc http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked
osvdb 55713
sectrack 1022528
vupen ADV-2009-1833
Last major update 08-11-2018 - 20:38
Published 10-07-2009 - 21:00
Last modified 08-11-2018 - 20:38
Back to Top