WordPress · Wordpress · CVE-2010-5297
**Name of the Vulnerable Software and Affected Versions**
WordPress versions prior to 3.0.1
**Description**
The issue allows remote authenticated administrators to bypass intended access restrictions in certain circumstances. This occurs when a Multisite installation is used and the "site administrators can add users" option is changed, as the change is permanently retained.
**Recommendations**
For versions prior to 3.0.1, update to version 3.0.1 or later to resolve the issue.