Description

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.

Remediation

References

CVE-2010-0682

Related Vulnerabilities

Apache HTTP Server Other Vulnerability (CVE-2003-0987)

WordPress Plugin Connections Business Directory Unspecified Vulnerability (0.7.1.5)

Chamilo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-31939)

Magento Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-7871)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-31779)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2010-0682