vulnerability

Wordpress: CVE-2011-1762: Incorrect Default Permissions

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
2022-04-18
Added
2022-04-29
Modified
2022-04-29

Description

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.

Solution

misc-no-solution-exists
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.