WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-02-23 12:30
Updated : 2011-01-18 22:55
NVD link : CVE-2010-0682
Mitre link : CVE-2010-0682
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
wordpress
- wordpress