Description

wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outage), via a direct request.

Remediation

References

CVE-2008-6767

Related Vulnerabilities

WordPress Plugin Sharebar Cross-Site Scripting and SQL Injection Vulnerabilities (1.2.1)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7832)

WordPress Plugin Better Font Awesome Cross-Site Scripting (2.0.3)

Magento Incorrect Authorization Vulnerability (CVE-2020-24401)

WordPress Plugin LeadConnector Security Bypass (1.7)

Severity

Critical

Classification

CVE-2008-6767

Tags

Missing Update Known Vulnerabilities