Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fp52-jqr7-7249

Опубликовано: 19 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.

EPSS

Процентиль: 61%
0.00415
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-276

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 3 лет назад

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.

CVSS3: 6.5
nvd
больше 3 лет назад

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.

CVSS3: 6.5
debian
больше 3 лет назад

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'sc ...

EPSS

Процентиль: 61%
0.00415
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-276