Description
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.
Remediation
References
Related Vulnerabilities
Sqlite NULL Pointer Dereference Vulnerability (CVE-2020-13435)
PrestaShop Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-20717)
WordPress Plugin WP Attachment Export Arbitrary File Download (0.2.3)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-23620)