Description

wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability requirement, which allows remote authenticated users to perform publish actions by leveraging the Contributor role.

Remediation

References

CVE-2011-5270

Related Vulnerabilities

MySQL CVE-2018-3067 Vulnerability (CVE-2018-3067)

Atlassian Confluence CVE-2023-22512 Vulnerability (CVE-2023-22512)

MySQL CVE-2020-14680 Vulnerability (CVE-2020-14680)

MySQL CVE-2018-3077 Vulnerability (CVE-2018-3077)

Apache HTTP Server Buffer Underwrite ('Buffer Underflow') Vulnerability (CVE-2026-44631)

Severity

Medium

Classification

CVE-2011-5270 CWE-264

Tags

Missing Update Known Vulnerabilities