CVE-2012-4421

First published: Fri Sep 14 2012(Updated: )

The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing Protocol (aka AtomPub) feature.

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/last-modified-date
• agent/softwarecombine
• agent/first-publish-date
• collector/nvd-index
• agent/software-canonical-lookup-request
• agent/author
• agent/references
• agent/severity
• agent/remedy
• agent/weakness
• agent/tags
• agent/description
• agent/event
• collector/mitre-cve
• source/MITRE
• vendor/wordpress
• canonical/wordpress wordpress
• version/wordpress wordpress/3.4.1
• version/wordpress wordpress/0.71
• version/wordpress wordpress/1.0
• version/wordpress wordpress/1.0.1
• version/wordpress wordpress/1.0.2
• version/wordpress wordpress/1.1.1
• version/wordpress wordpress/1.2
• version/wordpress wordpress/1.2.1
• version/wordpress wordpress/1.2.2
• version/wordpress wordpress/1.2.3
• version/wordpress wordpress/1.2.4
• version/wordpress wordpress/1.2.5
• version/wordpress wordpress/1.2.5-a
• version/wordpress wordpress/1.3
• version/wordpress wordpress/1.3.2
• version/wordpress wordpress/1.3.3
• version/wordpress wordpress/1.5
• version/wordpress wordpress/1.5.1
• version/wordpress wordpress/1.5.1.1
• version/wordpress wordpress/1.5.1.2
• version/wordpress wordpress/1.5.1.3
• version/wordpress wordpress/1.5.2
• version/wordpress wordpress/2.0
• version/wordpress wordpress/2.0.1
• version/wordpress wordpress/2.0.2
• version/wordpress wordpress/2.0.4
• version/wordpress wordpress/2.0.5
• version/wordpress wordpress/2.0.6
• version/wordpress wordpress/2.0.7
• version/wordpress wordpress/2.0.8
• version/wordpress wordpress/2.0.9
• version/wordpress wordpress/2.0.10
• version/wordpress wordpress/2.0.11
• version/wordpress wordpress/2.1
• version/wordpress wordpress/2.1.1
• version/wordpress wordpress/2.1.2
• version/wordpress wordpress/2.1.3
• version/wordpress wordpress/2.2
• version/wordpress wordpress/2.2.1
• version/wordpress wordpress/2.2.2
• version/wordpress wordpress/2.2.3
• version/wordpress wordpress/2.3
• version/wordpress wordpress/2.3.1
• version/wordpress wordpress/2.3.2
• version/wordpress wordpress/2.3.3
• version/wordpress wordpress/2.5
• version/wordpress wordpress/2.5.1
• version/wordpress wordpress/2.6
• version/wordpress wordpress/2.6.1
• version/wordpress wordpress/2.6.2
• version/wordpress wordpress/2.6.3
• version/wordpress wordpress/2.6.5
• version/wordpress wordpress/2.7
• version/wordpress wordpress/2.7.1
• version/wordpress wordpress/2.8
• version/wordpress wordpress/2.8.1
• version/wordpress wordpress/2.8.2
• version/wordpress wordpress/2.8.3
• version/wordpress wordpress/2.8.4
• version/wordpress wordpress/2.8.4-a
• version/wordpress wordpress/2.8.5
• version/wordpress wordpress/2.8.5.1
• version/wordpress wordpress/2.8.5.2
• version/wordpress wordpress/2.8.6
• version/wordpress wordpress/2.9
• version/wordpress wordpress/2.9.1
• version/wordpress wordpress/2.9.1.1
• version/wordpress wordpress/2.9.2
• version/wordpress wordpress/3.0
• version/wordpress wordpress/3.0.1
• version/wordpress wordpress/3.0.2
• version/wordpress wordpress/3.0.3
• version/wordpress wordpress/3.0.4
• version/wordpress wordpress/3.0.5
• version/wordpress wordpress/3.0.6
• version/wordpress wordpress/3.1
• version/wordpress wordpress/3.1.1
• version/wordpress wordpress/3.1.2
• version/wordpress wordpress/3.1.3
• version/wordpress wordpress/3.1.4
• version/wordpress wordpress/3.2
• version/wordpress wordpress/3.2.1
• version/wordpress wordpress/3.3
• version/wordpress wordpress/3.3.1
• version/wordpress wordpress/3.3.2
• version/wordpress wordpress/3.3.3
• version/wordpress wordpress/3.4.0