Description

WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors.

Remediation

References

CVE-2012-3385

Related Vulnerabilities

WordPress Plugin Webapp builder (Free mobile apps native iPhone iOS & Android Winphone mobile apps) Arbitrary File Upload (2.0)

WordPress Plugin GoDaddy Email Marketing Cross-Site Request Forgery (1.1.2)

Apache HTTP Server CVE-2009-3720 Vulnerability (CVE-2009-3720)

SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-8580)

WordPress Plugin WordPress Popular Posts Cross-Site Scripting (5.3.3)

Severity

Medium

Classification

CVE-2012-3385 CWE-264

Tags

Missing Update Known Vulnerabilities