Code Execution Vulnerability in WordPress MU and Earlier Versions
CVE-2008-5695

Currently unrated

Key Information:

Vendor: Wordpress
Status: WordPress; WordPress Mu
Vendor: CVE Published:; 19 December 2008

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 16%

What is CVE-2008-5695?

A vulnerability exists in the wp-admin/options.php file that fails to validate requests correctly when updating options. This flaw allows remote authenticated users, specifically those with 'manage_options' and 'upload_files' capabilities, to exploit the system by uploading a malicious PHP script. Once uploaded, these users can inject the script's pathname into the active_plugins setting, enabling the execution of arbitrary code on the server. This vulnerability puts WordPress installations at risk, including WordPress MU prior to version 1.3.2 and WordPress versions 2.3.2 and earlier, potentially leading to unauthorized access and manipulation of the site.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-5695 - Proof of Concept