Description

WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reassignment via unspecified vectors.

Remediation

References

CVE-2013-2200

Related Vulnerabilities

WordPress Plugin Affiliate Press Multiple Cross-Site Scripting Vulnerabilities (0.3.8)

MySQL CVE-2013-3807 Vulnerability (CVE-2013-3807)

EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14329)

Oracle Database Server CVE-2011-0838 Vulnerability (CVE-2011-0838)

MySQL CVE-2021-35624 Vulnerability (CVE-2021-35624)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2013-2200