Description
WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php.
Remediation
References
Related Vulnerabilities
SharePoint CVE-2020-16953 Vulnerability (CVE-2020-16953)
Internet Information Services Other Vulnerability (CVE-2002-0075)
WordPress Plugin WP with Spritz Local/Remote File Inclusion (1.0)
MySQL CVE-2019-2968 Vulnerability (CVE-2019-2968)
WordPress Plugin Better Search Replace Multiple Unspecified Vulnerabilities (1.0.3)