Description

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.

Remediation

References

CVE-2010-0682

Related Vulnerabilities

WordPress Plugin Quick Page/Post Redirect Security Bypass (5.1.9)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-48007)

Liferay DXP CVE-2021-29041 Vulnerability (CVE-2021-29041)

WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (4.6.0)

WordPress Plugin WordPress Button Plugin MaxButtons Security Bypass (1.19.0)

Severity

Medium

Classification

CVE-2010-0682 CWE-264

Tags

Missing Update Known Vulnerabilities