CVE-2012-2402: wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass in...

Security readout for executives and security teams

This issue affected WordPress before 3.3.2. An authenticated site administrator could bypass intended restrictions and deactivate plugins enabled across an entire WordPress network. Business risk depends on whether those network-wide plugins provide security, compliance, availability, or revenue-critical functions. Exposure is most relevant to WordPress multisite or network deployments running versions before 3.3.2, especially where site administrators are delegated but should not control network-wide plugins. The supplied affected-product metadata is incomplete, listing only the narrative WordPress version condition. Prioritize remediation for legacy WordPress networks where delegated administrators exist or network-wide plugins enforce security controls. For modern, fully patched WordPress environments, this is primarily a historical exposure check. Mitigation focus: Upgrade WordPress installations older than 3.3.2 to a fixed supported version.; Apply distribution security updates, including Debian guidance where applicable.; Review vendor advisories before assuming backported package versions remain vulnerable..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.