CVE-2010-5297
Status: ModifiedLow (2.1)—
WordPress before 3.0.1, when a Multisite installation is used, permanently retains the "site administrators can add users" option once changed, which might allow remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances via an add action after a temporary change.
CVSS
- Version: 2.0
- Vector: AV:N/AC:H/Au:S/C:N/I:P/A:N
- Base score: 2.1
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.21%
- Percentile among all scored CVEs: 82
- Score date: 10/8/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-264
References
- http://codex.wordpress.org/Changelog/3.0.1
- http://core.trac.wordpress.org/query?status=closed&group=resolution&order=priority&milestone=3.0.1&resolution=fixed
- https://core.trac.wordpress.org/changeset/15342
- https://core.trac.wordpress.org/ticket/14119
- http://codex.wordpress.org/Changelog/3.0.1
- http://core.trac.wordpress.org/query?status=closed&group=resolution&order=priority&milestone=3.0.1&resolution=fixed
- https://core.trac.wordpress.org/changeset/15342
- https://core.trac.wordpress.org/ticket/14119
Raw JSON (NVD)
Show
{
"id": "CVE-2010-5297",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:H/Au:S/C:N/I:P/A:N",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "HIGH",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2014-01-21T01:55:03.293",
"references": [
{
"url": "http://codex.wordpress.org/Changelog/3.0.1",
"source": "cve@mitre.org"
},
{
"url": "http://core.trac.wordpress.org/query?status=closed&group=resolution&order=priority&milestone=3.0.1&resolution=fixed",
"source": "cve@mitre.org"
},
{
"url": "https://core.trac.wordpress.org/changeset/15342",
"tags": [
"Exploit",
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "https://core.trac.wordpress.org/ticket/14119",
"tags": [
"Exploit",
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "http://codex.wordpress.org/Changelog/3.0.1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://core.trac.wordpress.org/query?status=closed&group=resolution&order=priority&milestone=3.0.1&resolution=fixed",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://core.trac.wordpress.org/changeset/15342",
"tags": [
"Exploit",
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://core.trac.wordpress.org/ticket/14119",
"tags": [
"Exploit",
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "WordPress before 3.0.1, when a Multisite installation is used, permanently retains the \"site administrators can add users\" option once changed, which might allow remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances via an add action after a temporary change."
},
{
"lang": "es",
"value": "WordPress anterior a la versión 3.0.1, cuando se usa una instalación Multisite, conserva permanentemente la opción \"los usuarios pueden añadir administradores al sitio\" una vez cambiada, lo que podría permitir a administradores remotos autenticados evadir restricciones de acceso intencionadas en circunstancias oportunistas a través de una acción de añadido después de un cambio temporal."
}
],
"lastModified": "2026-06-16T23:26:30.210",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "503714FF-3C34-4F54-A687-C07E575B788C",
"versionEndIncluding": "3.0"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDCFE9AA-39E9-4366-AAB7-F7A891BC797E"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAF4671A-8449-438E-922B-94E5542137BC"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92F05A1F-2227-4166-807B-1BDE2EA8F245"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EECE66B3-3696-4E98-AF63-DF2FB256A6FB"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E75BB382-6B47-4C6A-BF94-80443BEB1A23"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFA75368-506F-4772-B0F2-8AAECDF288F2"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FDDD9E5C-766F-4945-B87D-781E780AB03E"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A48C0BB5-2D87-49ED-A8EB-843E5F0EAE8E"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6AAA17D-FBB8-4F54-82E2-870D6FA5C299"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2A0CAEE-5C14-44C6-85FB-6AFDAAA1C3F2"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66BE667A-A937-4C38-B4D5-29B33F23F7B9"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A3624D4-E666-4A1B-B465-714ACBA0034C"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A7CBC45-320E-48CF-9A63-07DDE2FB61BE"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "266E32CD-66FB-4E19-8091-EC748B177D8A"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3DD9120-2224-4612-A6EE-539F47BD50E0"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A9FBA02-8A6A-471F-92CD-D8E77B5061C2"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B5BC7E8-4C8A-4183-AB8C-1DAE12935387"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0F9137B-D13F-488B-8196-85E06FAB682E"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82F257F4-CB62-4C6F-8866-AA253EC8C0C3"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79AB6F6F-2FE3-4FC3-9009-D40EA852711F"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A82F4D88-779D-4D5D-96CD-2B31B61BA29E"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA0DABD9-DE15-4619-8668-0277A67F5205"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A80D1CBE-DA6D-4939-A4A4-8F237C97F76C"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40BEC573-A346-4F07-8053-A5F6E92A343C"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A777651-D2B2-47E0-A13C-BD667635F3E8"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B017F95A-90F8-4DE4-B74F-ABB712F32987"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1503C4CB-5D58-4523-860C-4B637AD91CB9"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55050BF2-A950-45FF-8CD7-7689431AD82A"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1253161D-F1C8-46D6-B970-20335071500E"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEE401B3-6291-4EA8-8800-0350BAC0B22E"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C0D45AE-F0FE-4005-80FB-FEFD2DCCE7D2"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5663CAA-0859-447E-8489-02CE4315DF91"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "480AE325-6DE1-4769-A931-0C6F40D15267"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE23B6C2-354C-47BE-87B9-D4A0A3EE8ADC"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC657077-8955-4CE6-93D8-F78B1BA3A949"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43FADD00-822C-4BA2-A39F-1459AD786683"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D863DE9E-FD9E-4EA1-9615-02D678813AB9"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8.4:a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3ABD501B-351E-4B4E-9B0B-CF8DCBC72E66"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AA39559-D170-4644-B04D-D6D806B5F33C"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54954434-86BC-403C-949D-E9DA8931FE6E"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9A88E6C-BE39-4668-BD0F-EBDBA41010F6"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.8.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA7BF77C-68A1-421B-A446-6206354CA7FE"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF45B5A6-0D49-494F-98A0-CCCBB0CBB882"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB874C78-3F05-4053-A685-40DE7055359C"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.9.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BC0FFB2-58E1-47D2-ACB0-9102D4E09675"
},
{
"criteria": "cpe:2.3:a:wordpress:wordpress:2.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "654F2F75-42D4-4D7A-A8B8-F1C580ABDCA5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}