Description

xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functionality, which can be used to "publish a previously saved post."

Remediation

References

CVE-2007-1893

Related Vulnerabilities

Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0419)

MySQL CVE-2017-10365 Vulnerability (CVE-2017-10365)

MySQL NULL Pointer Dereference Vulnerability (CVE-2020-1971)

OpenSSL Other Vulnerability (CVE-2002-0656)

MediaWiki Other Vulnerability (CVE-2005-1245)

Severity

Medium

Classification

CVE-2007-1893 CWE-264

Tags

Missing Update Known Vulnerabilities