CVE-2011-1762CWE-284

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts

published April 18, 2022

CVSS
—
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00733 · 53.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-04-18T16:20Z
EPSS history
Timeline
  • 18 APR 16:20Z
    A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts
    cvelistv5