CVE-2009-2853

Published: Aug 18, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/.

Affected (57)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

57 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Version 0.711
Wordpress Wordpress	Version 0.71
Wordpress Wordpress	Version 0.71 beta
Wordpress Wordpress	Version 0.71 beta_3
Wordpress Wordpress	Version 0.72
Wordpress Wordpress	Version 0.72 beta_1
Wordpress Wordpress	Version 0.72 beta_2
Wordpress Wordpress	Version 0.72 rc1
Wordpress Wordpress	Version 1.0.1 miles
Wordpress Wordpress	Version 1.0.1 rc1
Wordpress Wordpress	Version 1.0
Wordpress Wordpress	Version 1.2.1
Wordpress Wordpress	Version 1.2.2
Wordpress Wordpress	Version 1.2
Wordpress Wordpress	Version 1.2 beta
Wordpress Wordpress	Version 1.2 rc1
Wordpress Wordpress	Version 1.5.1.3
Wordpress Wordpress	Version 1.5.1
Wordpress Wordpress	Version 1.5.2
Wordpress Wordpress	Version 1.5
Wordpress Wordpress	Version 2.0.10
Wordpress Wordpress	Version 2.0.11
Wordpress Wordpress	Version 2.0.1
Wordpress Wordpress	Version 2.0.2
Wordpress Wordpress	Version 2.0.3
Wordpress Wordpress	Version 2.0.4
Wordpress Wordpress	Version 2.0.5 ronan
Wordpress Wordpress	Version 2.0.6
Wordpress Wordpress	Version 2.0.7
Wordpress Wordpress	Version 2.0.9
Wordpress Wordpress	Version 2.0
Wordpress Wordpress	Version 2.1.1
Wordpress Wordpress	Version 2.1.1 dangerous
Wordpress Wordpress	Version 2.1.2
Wordpress Wordpress	Version 2.1.3
Wordpress Wordpress	Version 2.1 ella
Wordpress Wordpress	Version 2.2.1
Wordpress Wordpress	Version 2.2.2
Wordpress Wordpress	Version 2.2.3
Wordpress Wordpress	Version 2.2
Wordpress Wordpress	Version 2.3.1
Wordpress Wordpress	Version 2.3.1 rc1
Wordpress Wordpress	Version 2.3.2
Wordpress Wordpress	Version 2.3
Wordpress Wordpress	Version 2.3 beta3
Wordpress Wordpress	Version 2.3 rc1
Wordpress Wordpress	Version 2.5.1
Wordpress Wordpress	Version 2.5
Wordpress Wordpress	Version 2.6.1
Wordpress Wordpress	Version 2.6.2
Wordpress Wordpress	Version 2.6.3
Wordpress Wordpress	Version 2.6
Wordpress Wordpress	Version 2.7.1
Wordpress Wordpress	Version 2.7 coltrane
Wordpress Wordpress	Version 2.8.1
Wordpress Wordpress	Version 2.8.2
Wordpress Wordpress	Version 2.8