WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are there any known privilege escalation bugs in WP 2.9 to be careful for?

share|improve this question
Please give an example of what you mean by a "privilege escalation bug" ... that way we'll know what you're talking about. – EAMann Sep 21 '10 at 18:03
Are there any known features or modules, where privelege escalation is possible? To ask it differently: If I were a hacker, how can I escalate my account on WP 2.9.x?I'm coming from a security standpoint. So I want an example of a vulnerable module and how to fix it. – Moshe Sep 21 '10 at 18:27
up vote 2 down vote accepted

There are no known security vulnerabilities in 2.9.2

If any new vulnerabilities are discovered the fix will be packported. (This has not happened but if it did we would get a version 2.9.3)

WordPress does not have a backport policy that goes further than the previous major release so it is unknown when the 2.9 branch will stop being supported.

WordPress does not maintain lts versions. Matt likes to call them Long Term Suckage and most in the community agree that there is really no reason to keep running out dated versions.

share|improve this answer
Aww man... Say I wanted to hack something :P Thanks. – Moshe Sep 21 '10 at 18:59
@Moshe - if you're in the mood to hack something, take a look here: hakre.wordpress.com/2010/08/24/… – hakre Sep 21 '10 at 22:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.