CVE-2011-0701

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a…

published March 14, 2011

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03168 · 87.8th percentile
Published
2011-03-14T19:00Z
EPSS history
Timeline
  • 14 MAR 19:00Z
    wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a…
    cvelistv5