WordPress Vulnerabilities

WordPress <= 5.2.3 - Hardening Bypass

Affects WordPress

5.2.3
Fixed in WordPress 5.2.4
5.2.2
Fixed in WordPress 5.2.4
5.2.1
Fixed in WordPress 5.2.4
5.2
Fixed in WordPress 5.2.4
5.1.2
Fixed in WordPress 5.1.3
5.1.1
Fixed in WordPress 5.1.3
5.1
Fixed in WordPress 5.1.3
5.0.6
Fixed in WordPress 5.0.7
5.0.4
Fixed in WordPress 5.0.7
5.0.3
Fixed in WordPress 5.0.7
5.0.2
Fixed in WordPress 5.0.7
5.0.1
Fixed in WordPress 5.0.7
5.0
Fixed in WordPress 5.0.7
4.9.11
Fixed in WordPress 4.9.12
4.9.10
Fixed in WordPress 4.9.12
4.9.1
Fixed in WordPress 4.9.12
4.9
Fixed in WordPress 4.9.12
4.8.10
Fixed in WordPress 4.8.11
4.8.1
Fixed in WordPress 4.8.11
4.8
Fixed in WordPress 4.8.11
4.7.14
Fixed in WordPress 4.7.15
4.7.13
Fixed in WordPress 4.7.15
4.7.12
Fixed in WordPress 4.7.15
4.7.11
Fixed in WordPress 4.7.15
4.7.10
Fixed in WordPress 4.7.15
4.7.1
Fixed in WordPress 4.7.15
4.7
Fixed in WordPress 4.7.15
4.6.15
Fixed in WordPress 4.6.16
4.6.14
Fixed in WordPress 4.6.16
4.6.13
Fixed in WordPress 4.6.16
4.6.12
Fixed in WordPress 4.6.16
4.6.11
Fixed in WordPress 4.6.16
4.6.10
Fixed in WordPress 4.6.16
4.6.1
Fixed in WordPress 4.6.16
4.6
Fixed in WordPress 4.6.16
4.5.18
Fixed in WordPress 4.5.19
4.5.17
Fixed in WordPress 4.5.19
4.5.16
Fixed in WordPress 4.5.19
4.5.15
Fixed in WordPress 4.5.19
4.5.14
Fixed in WordPress 4.5.19
4.5.13
Fixed in WordPress 4.5.19
4.5.12
Fixed in WordPress 4.5.19
4.5.11
Fixed in WordPress 4.5.19
4.5.10
Fixed in WordPress 4.5.19
4.5.1
Fixed in WordPress 4.5.19
4.5
Fixed in WordPress 4.5.19
4.4.2
Fixed in WordPress 4.4.20
4.4.19
Fixed in WordPress 4.4.20
4.4.18
Fixed in WordPress 4.4.20
4.4.17
Fixed in WordPress 4.4.20
4.4.16
Fixed in WordPress 4.4.20
4.4.15
Fixed in WordPress 4.4.20
4.4.14
Fixed in WordPress 4.4.20
4.4.13
Fixed in WordPress 4.4.20
4.4.12
Fixed in WordPress 4.4.20
4.4.11
Fixed in WordPress 4.4.20
4.4.10
Fixed in WordPress 4.4.20
4.4.1
Fixed in WordPress 4.4.20
4.4
Fixed in WordPress 4.4.20
4.3.20
Fixed in WordPress 4.3.21
4.3.2
Fixed in WordPress 4.3.21
4.3.19
Fixed in WordPress 4.3.21
4.3.18
Fixed in WordPress 4.3.21
4.3.17
Fixed in WordPress 4.3.21
4.3.16
Fixed in WordPress 4.3.21
4.3.15
Fixed in WordPress 4.3.21
4.3.14
Fixed in WordPress 4.3.21
4.3.13
Fixed in WordPress 4.3.21
4.3.12
Fixed in WordPress 4.3.21
4.3.11
Fixed in WordPress 4.3.21
4.3.10
Fixed in WordPress 4.3.21
4.3.1
Fixed in WordPress 4.3.21
4.3
Fixed in WordPress 4.3.21
4.2.24
Fixed in WordPress 4.2.25
4.2.23
Fixed in WordPress 4.2.25
4.2.22
Fixed in WordPress 4.2.25
4.2.21
Fixed in WordPress 4.2.25
4.2.20
Fixed in WordPress 4.2.25
4.2.2
Fixed in WordPress 4.2.25
4.2.19
Fixed in WordPress 4.2.25
4.2.18
Fixed in WordPress 4.2.25
4.2.17
Fixed in WordPress 4.2.25
4.2.16
Fixed in WordPress 4.2.25
4.2.15
Fixed in WordPress 4.2.25
4.2.14
Fixed in WordPress 4.2.25
4.2.13
Fixed in WordPress 4.2.25
4.2.12
Fixed in WordPress 4.2.25
4.2.11
Fixed in WordPress 4.2.25
4.2.10
Fixed in WordPress 4.2.25
4.2.1
Fixed in WordPress 4.2.25
4.2
Fixed in WordPress 4.2.25
4.1.27
Fixed in WordPress 4.1.28
4.1.26
Fixed in WordPress 4.1.28
4.1.25
Fixed in WordPress 4.1.28
4.1.24
Fixed in WordPress 4.1.28
4.1.23
Fixed in WordPress 4.1.28
4.1.22
Fixed in WordPress 4.1.28
4.1.21
Fixed in WordPress 4.1.28
4.1.20
Fixed in WordPress 4.1.28
4.1.2
Fixed in WordPress 4.1.28
4.1.19
Fixed in WordPress 4.1.28
4.1.18
Fixed in WordPress 4.1.28
4.1.17
Fixed in WordPress 4.1.28
4.1.16
Fixed in WordPress 4.1.28
4.1.15
Fixed in WordPress 4.1.28
4.1.14
Fixed in WordPress 4.1.28
4.1.13
Fixed in WordPress 4.1.28
4.1.12
Fixed in WordPress 4.1.28
4.1.11
Fixed in WordPress 4.1.28
4.1.10
Fixed in WordPress 4.1.28
4.1.1
Fixed in WordPress 4.1.28
4.1
Fixed in WordPress 4.1.28
4.0.27
Fixed in WordPress 4.0.28
4.0.26
Fixed in WordPress 4.0.28
4.0.25
Fixed in WordPress 4.0.28
4.0.24
Fixed in WordPress 4.0.28
4.0.23
Fixed in WordPress 4.0.28
4.0.22
Fixed in WordPress 4.0.28
4.0.21
Fixed in WordPress 4.0.28
4.0.20
Fixed in WordPress 4.0.28
4.0.2
Fixed in WordPress 4.0.28
4.0.19
Fixed in WordPress 4.0.28
4.0.18
Fixed in WordPress 4.0.28
4.0.17
Fixed in WordPress 4.0.28
4.0.16
Fixed in WordPress 4.0.28
4.0.15
Fixed in WordPress 4.0.28
4.0.14
Fixed in WordPress 4.0.28
4.0.13
Fixed in WordPress 4.0.28
4.0.12
Fixed in WordPress 4.0.28
4.0.11
Fixed in WordPress 4.0.28
4.0.10
Fixed in WordPress 4.0.28
4.0.1
Fixed in WordPress 4.0.28
4.0
Fixed in WordPress 4.0.28
3.9.28
Fixed in WordPress 3.9.29
3.9.27
Fixed in WordPress 3.9.29
3.9.26
Fixed in WordPress 3.9.29
3.9.25
Fixed in WordPress 3.9.29
3.9.24
Fixed in WordPress 3.9.29
3.9.23
Fixed in WordPress 3.9.29
3.9.22
Fixed in WordPress 3.9.29
3.9.21
Fixed in WordPress 3.9.29
3.9.20
Fixed in WordPress 3.9.29
3.9.2
Fixed in WordPress 3.9.29
3.9.19
Fixed in WordPress 3.9.29
3.9.18
Fixed in WordPress 3.9.29
3.9.17
Fixed in WordPress 3.9.29
3.9.16
Fixed in WordPress 3.9.29
3.9.15
Fixed in WordPress 3.9.29
3.9.14
Fixed in WordPress 3.9.29
3.9.13
Fixed in WordPress 3.9.29
3.9.12
Fixed in WordPress 3.9.29
3.9.11
Fixed in WordPress 3.9.29
3.9.10
Fixed in WordPress 3.9.29
3.9.1
Fixed in WordPress 3.9.29
3.9
Fixed in WordPress 3.9.29
3.8.30
Fixed in WordPress 3.8.31
3.8.3
Fixed in WordPress 3.8.31
3.8.29
Fixed in WordPress 3.8.31
3.8.28
Fixed in WordPress 3.8.31
3.8.27
Fixed in WordPress 3.8.31
3.8.26
Fixed in WordPress 3.8.31
3.8.25
Fixed in WordPress 3.8.31
3.8.24
Fixed in WordPress 3.8.31
3.8.23
Fixed in WordPress 3.8.31
3.8.22
Fixed in WordPress 3.8.31
3.8.21
Fixed in WordPress 3.8.31
3.8.20
Fixed in WordPress 3.8.31
3.8.2
Fixed in WordPress 3.8.31
3.8.19
Fixed in WordPress 3.8.31
3.8.18
Fixed in WordPress 3.8.31
3.8.17
Fixed in WordPress 3.8.31
3.8.16
Fixed in WordPress 3.8.31
3.8.15
Fixed in WordPress 3.8.31
3.8.14
Fixed in WordPress 3.8.31
3.8.13
Fixed in WordPress 3.8.31
3.8.12
Fixed in WordPress 3.8.31
3.8.11
Fixed in WordPress 3.8.31
3.8.10
Fixed in WordPress 3.8.31
3.8.1
Fixed in WordPress 3.8.31
3.8
Fixed in WordPress 3.8.31
3.7.30
Fixed in WordPress 3.7.31
3.7.3
Fixed in WordPress 3.7.31
3.7.29
Fixed in WordPress 3.7.31
3.7.28
Fixed in WordPress 3.7.31
3.7.27
Fixed in WordPress 3.7.31
3.7.26
Fixed in WordPress 3.7.31
3.7.25
Fixed in WordPress 3.7.31
3.7.24
Fixed in WordPress 3.7.31
3.7.23
Fixed in WordPress 3.7.31
3.7.22
Fixed in WordPress 3.7.31
3.7.21
Fixed in WordPress 3.7.31
3.7.20
Fixed in WordPress 3.7.31
3.7.2
Fixed in WordPress 3.7.31
3.7.19
Fixed in WordPress 3.7.31
3.7.18
Fixed in WordPress 3.7.31
3.7.17
Fixed in WordPress 3.7.31
3.7.16
Fixed in WordPress 3.7.31
3.7.15
Fixed in WordPress 3.7.31
3.7.14
Fixed in WordPress 3.7.31
3.7.13
Fixed in WordPress 3.7.31
3.7.12
Fixed in WordPress 3.7.31
3.7.11
Fixed in WordPress 3.7.31
3.7.10
Fixed in WordPress 3.7.31
3.7.1
Fixed in WordPress 3.7.31
3.7
Fixed in WordPress 3.7.31

References

URL
https://blog.ripstech.com/2020/wordpress-hardening-bypass/
URL
https://hackerone.com/reports/436928
URL
https://wordpress.org/news/2019/11/wordpress-5-2-4-update/

Miscellaneous

Original Researcher
Simon Scannell
Verified
No
WPVDB ID
378d7df5-bce2-406a-86b2-ff79cd699920

Timeline

Publicly Published
2020-01-21 (about 6 years ago)
Added
2020-06-09 (about 6 years ago)
Last Updated
2020-06-10 (about 6 years ago)

Other

Published
Title
Published
2022-09-26
Title
Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass
Published
2024-07-08
Title
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - IP Address Spoofing to Antispam Bypass
Published
2015-06-12
Title
Zip Attachments < 1.5 - Arbitrary File Download
Published
2026-02-06
Title
Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass
Published
2015-06-10
Title
Paypal Currencucy Converter Basic For Woocommerce <= 1.3 - File Read