Description

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.

Remediation

References

CVE-2010-0682

Related Vulnerabilities

Envoy Proxy Improper Certificate Validation Vulnerability (CVE-2022-21656)

MySQL CVE-2012-1757 Vulnerability (CVE-2012-1757)

MySQL CVE-2022-21336 Vulnerability (CVE-2022-21336)

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4627)

MyBB CVE-2006-0218 Vulnerability (CVE-2006-0218)

Severity

Medium

Classification

CVE-2010-0682 CWE-264

Tags

Missing Update Known Vulnerabilities