Lucene search
WpvulndbWPVDB-ID:2C423DC0-4FE4-4E5A-9386-412DE4FB2587HistoryAug 01, 2014 - 12:00 a.m.
WordPress 2.9 - Failure to Restrict URL Access
2014-08-0100:00:00
wpscan.com
11
EPSS
0.006
Percentile
78.5%
When WordPress implemented the new Trash feature they failed to change the permissions granted when the post is in the trash. This means that an unauthenticated user cannot see the post, however an authenticated user can, no matter what privileges they have, even ‘subscriber’. See ExploitDB for PoC
Related
nvd
nvd
CVE-2010-0682
2010-02-23 20:30:00
ubuntucve
ubuntucve
CVE-2010-0682
2010-02-23 00:00:00
patchstack
patchstack
WordPress 2.9 - Failure to Restrict URL Access
2010-02-13 00:00:00
cvelist
cvelist
CVE-2010-0682
2010-02-23 20:00:00
openvas
openvas
WordPress Trashed Posts Information Disclosure Vulnerability
2010-02-24 00:00:00
Fedora Update for wordpress-mu FEDORA-2010-19329
2011-01-11 00:00:00
Fedora Update for wordpress-mu FEDORA-2010-19330
2011-01-11 00:00:00
prion
prion
Design/Logic Flaw
2010-02-23 20:30:00
debiancve
debiancve
CVE-2010-0682
2010-02-23 20:30:00
exploitdb
exploitdb
WordPress Core 2.9 - Failure to Restrict URL Access
2010-02-13 00:00:00
cve
cve
CVE-2010-0682
2010-02-23 20:30:00
nessus
nessus
Fedora 13 : wordpress-mu-2.9.2-2.fc13 (2010-19330)
2011-01-10 00:00:00
Fedora 14 : wordpress-mu-2.9.2-2.fc14 (2010-19329)
2011-01-10 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: wordpress-mu-2.9.2-2.fc13
2011-01-08 21:27:32
[SECURITY] Fedora 14 Update: wordpress-mu-2.9.2-2.fc14
2011-01-08 21:30:20