CVE-2012-4422

CVE-2012-4422 describes a privilege escalation vulnerability in WordPress versions prior to 3.4.2, specifically affecting multisite installations. An authenticated user with Administrator privileges could perform a network-wide plugin activation without requiring network-administrator privileges, potentially leading to unintended plugin changes. This vulnerability has a CVSS score of 3.5 (low severity) due to its network attack vector, medium attack complexity, and limited impact (partial integrity). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.