CVE-2011-1762

6.5MEDIUM

Key Information

Vendor: WordPress
Status: wordpress
Vendor: CVE Published:; 18 April 2022

Summary

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.

Affected Version(s)

wordpress = wordpress before 3.0.6 and 3.1.2

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Apr 18, 2022
Vulnerability Reserved.
Apr 19, 2011

Collectors

NVD DatabaseMitre Database