CVE-2012-6635

wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2014-01-21

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Wordpress (Wordpress)

References

• http://codex.wordpress.org/Version_3.3.3
• https://core.trac.wordpress.org/changeset/21086