CVE-2012-4421

CVE-2012-4421

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing Protocol (aka AtomPub) feature.

EPSS 1.9% · Fix available

Published

2012-09-14T19:00:00.000Z

Updated

2024-09-17T03:59:31.261Z

Stack: system

Check your server →