Code Execution Vulnerability in WordPress MU and Earlier Versions

CVE-2008-5695

Summary

A vulnerability exists in the wp-admin/options.php file that fails to validate requests correctly when updating options. This flaw allows remote authenticated users, specifically those with 'manage_options' and 'upload_files' capabilities, to exploit the system by uploading a malicious PHP script. Once uploaded, these users can inject the script's pathname into the active_plugins setting, enabling the execution of arbitrary code on the server. This vulnerability puts WordPress installations at risk, including WordPress MU prior to version 1.3.2 and WordPress versions 2.3.2 and earlier, potentially leading to unauthorized access and manipulation of the site.

References