WordPress Vulnerabilities
WordPress < 5.5.2 - XML-RPC Privilege Escalation
Description
The release notes state:
"Thanks to Justin Tran who reported an issue surrounding privilege escalation in XML-RPC. He also found and disclosed an issue around privilege escalation around post commenting via XML-RPC."
Affects WordPress
Fixed in WordPress 5.5.2 References
CVE
CVE
Classification
Type
PRIVESC
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Justin Tran
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-10-29 (about 3 years ago)
Added
2020-10-29 (about 3 years ago)
Last Updated
2020-11-01 (about 3 years ago)
WPScan 