WordPress Vulnerabilities

WordPress 2.0 - 3.0.1 wp-includes/comment.php Bypass Spam Restrictions

Affects WordPress

3.0.1
Fixed in WordPress 3.0.2
3.0
Fixed in WordPress 3.0.2
2.9.2
Fixed in WordPress 3.0.2
2.9.1
Fixed in WordPress 3.0.2
2.9
Fixed in WordPress 3.0.2
2.8.6
Fixed in WordPress 3.0.2
2.8.5
Fixed in WordPress 3.0.2
2.8.4
Fixed in WordPress 3.0.2
2.8.3
Fixed in WordPress 3.0.2
2.8.2
Fixed in WordPress 3.0.2
2.8.1
Fixed in WordPress 3.0.2
2.8
Fixed in WordPress 3.0.2
2.7.1
Fixed in WordPress 3.0.2
2.7
Fixed in WordPress 3.0.2
2.6.5
Fixed in WordPress 3.0.2
2.6.3
Fixed in WordPress 3.0.2
2.6.2
Fixed in WordPress 3.0.2
2.6.1
Fixed in WordPress 3.0.2
2.6
Fixed in WordPress 3.0.2
2.5.1
Fixed in WordPress 3.0.2
2.5
Fixed in WordPress 3.0.2
2.3.3
Fixed in WordPress 3.0.2
2.3.2
Fixed in WordPress 3.0.2
2.3.1
Fixed in WordPress 3.0.2
2.3
Fixed in WordPress 3.0.2
2.2.3
Fixed in WordPress 3.0.2
2.2.2
Fixed in WordPress 3.0.2
2.2.1
Fixed in WordPress 3.0.2
2.2
Fixed in WordPress 3.0.2
2.1.3
Fixed in WordPress 3.0.2
2.1.2
Fixed in WordPress 3.0.2
2.1.1
Fixed in WordPress 3.0.2
2.1
Fixed in WordPress 3.0.2
2.0.11
Fixed in WordPress 3.0.2
2.0.10
Fixed in WordPress 3.0.2
2.0.9
Fixed in WordPress 3.0.2
2.0.8
Fixed in WordPress 3.0.2
2.0.7
Fixed in WordPress 3.0.2
2.0.6
Fixed in WordPress 3.0.2
2.0.5
Fixed in WordPress 3.0.2
2.0.4
Fixed in WordPress 3.0.2
2.0.3
Fixed in WordPress 3.0.2
2.0.2
Fixed in WordPress 3.0.2
2.0.1
Fixed in WordPress 3.0.2
2.0
Fixed in WordPress 3.0.2

References

CVE
CVE-2010-5293

Miscellaneous

Verified
No
WPVDB ID
c62eda79-f10a-4aa5-8fb2-7d5540af4f54

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-08-08
Title
Stop Spam Comments <= 0.2.1.2 - Access Token Bypass
Published
2020-08-21
Title
WooCommerce - NAB Transact < 2.1.2 - Payment Bypass
Published
2020-10-29
Title
WordPress < 5.5.2 - Disable Spam Embeds from Disabled Sites on a Multisite Network
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS
Published
2024-01-27
Title
BookingPress < 1.0.75 - Unauthenticated Booking Price Manipulation