First published: Tue Feb 23 2010(Updated: )
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
WordPress WordPress | =2.9.1-rc1 | |
WordPress WordPress | =2.9 | |
WordPress WordPress | =2.9.1-beta1 | |
WordPress WordPress | =2.9.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.