GLSA-200608-19 : WordPress: Privilege escalation
Critical Nessus Plugin ID 22218
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-200608-19 (WordPress: Privilege escalation)
The WordPress developers have confirmed a vulnerability in capability checking for plugins.
By exploiting a flaw, a user can circumvent WordPress access restrictions when using plugins. The actual impact depends on the configuration of WordPress and may range from trivial to critical, possibly even the execution of arbitrary PHP code.
There is no known workaround at this time.
SolutionAll WordPress users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/wordpress-2.0.4'