Lucene search
RedhatCVELIST:CVE-2012-4421HistorySep 14, 2012 - 7:00 p.m.
CVE-2012-4421
2012-09-1419:00:00
redhat
www.cve.org
4
wordpress
create_post function
access restrictions
contributor role
atompub
The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing Protocol (aka AtomPub) feature.
Related
ubuntucve
ubuntucve
CVE-2012-4421
2012-09-14 00:00:00
openvas
openvas
WordPress < 3.4.2 Access Restriction Bypass Vulnerability
2022-12-08 00:00:00
cve
cve
CVE-2012-4421
2012-09-14 19:55:01
patchstack
patchstack
WordPress <= 3.4.1 - BYPASS
2012-08-21 00:00:00
nvd
nvd
CVE-2012-4421
2012-09-14 19:55:01
prion
prion
Design/Logic Flaw
2012-09-14 19:55:00
debiancve
debiancve
CVE-2012-4421
2012-09-14 19:55:01
nessus
nessus
WordPress < 3.4.2 Multiple Vulnerabilities
2012-09-12 00:00:00
WordPress < 3.4.2 Multiple Vulnerabilities
2016-02-26 00:00:00