tocsin

Debian/wordpress: unknown

wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manage_options

Action: Upgrade wordpress to 2.3.2 or later.

Affected

introducedfixedlast affected
02.3.2-

Fixed versions

2.3.2

Sources

published · modified · JSON