Privilege Escalation Vulnerability in WordPress: CVE-2020-28035
Summary
CVE-2020-28035: WordPress before 5.5.2 allows attackers to gain privileges via XML-RPC. Affects wordpress across 3 version ranges.
< 5.5.3+dfsg1-1
< c226f4016f80392aad6524a668f025e8e70b0789
< e86313b568fbd86fcd8e743a59be939d627c7e0d
Fixed in 5.5.3+dfsg1-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
WordPress is a widely-used open-source content management system (CMS) that enables users to create and manage websites easily. It is known for its flexibility, extensibility through plugins, and a large community of developers. However, certain versions of WordPress prior to 5.5.2 are vulnerable to a privilege escalation issue via XML-RPC, which can allow attackers to gain unauthorized access to administrative functions.
Vulnerability Detail
CVE-2020-28035 is a vulnerability in WordPress that allows attackers to exploit the XML-RPC interface to gain elevated privileges. This vulnerability arises from improper validation of requests, enabling unauthorized users to perform actions that should be restricted to administrators. The potential ramifications include unauthorized access to sensitive data, modification of site content, and complete control over the affected WordPress installation. The vulnerability has a CVSS score of 9.8, indicating its critical severity.
How To Fix
Minimum fixed version
5.5.3+dfsg1-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade wordpressTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not possible, consider disabling XML-RPC functionality as a temporary workaround. This can be done by adding the following code to your theme's functions.php file:
add_filter('xmlrpc_enabled', '__return_false');
Conclusion
CVE-2020-28035 represents a significant security risk for WordPress installations prior to version 5.5.2. It is crucial for users to update their systems promptly to mitigate the risk of privilege escalation attacks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for wordpress →
FAQ
CVE-2020-28035 is a vulnerability in WordPress that allows attackers to escalate privileges via the XML-RPC interface.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
WordPress versions prior to 5.5.2 are affected by this vulnerability.
If exploited, this vulnerability can allow attackers to gain unauthorized access to administrative functions, potentially compromising the entire site.
To secure your site, update to WordPress version 5.5.3 or later and consider disabling XML-RPC if not needed.
Related vulnerabilities
Recent vulnerabilities recorded for wordpress.
