Description

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.

Remediation

References

CVE-2010-0682

Related Vulnerabilities

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-0218)

WordPress Plugin Slider by 10Web-Responsive Image Slider Cross-Site Request Forgery (1.2.22)

WordPress Plugin Embed Swagger Cross-Site Scripting (1.0.0)

WordPress Plugin Pinblocks-Gutenberg blocks with Pinterest widgets Unspecified Vulnerability (1.0.1)

MySQL CVE-2014-2484 Vulnerability (CVE-2014-2484)

Severity

Medium

Classification

CVE-2010-0682 CWE-264

Tags

Missing Update Known Vulnerabilities