CVE-2010-0682
CVE-2010-0682
This page contains facts from public vulnerability sources. Check the original advisory before updating.
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.
EPSS 10.0% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html
- http://tmacuk.co.uk/?p=180
- http://wordpress.org/development/2010/02/wordpress-2-9-2/
- http://secunia.com/advisories/42871
- http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/
- https://core.trac.wordpress.org/ticket/11236
- http://secunia.com/advisories/38592
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html
- http://www.osvdb.org/62330
- https://nvd.nist.gov/vuln/detail/CVE-2010-0682