Description

WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reassignment via unspecified vectors.

Remediation

References

CVE-2013-2200

Related Vulnerabilities

WordPress Plugin WPFront Scroll Top Cross-Site Scripting (2.0.5.07184)

PHP Out-of-bounds Read Vulnerability (CVE-2019-9023)

WordPress Plugin Portable phpMyAdmin Authentication Bypass (1.3.0)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43722)

PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-39524)

Severity

Medium

Classification

CVE-2013-2200 CWE-264

Tags

Missing Update Known Vulnerabilities