CVE-2012-4421

The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote…

published September 14, 2012

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing Protocol (aka AtomPub) feature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01902 · 79.6th percentile
Published
2012-09-14T19:00Z
EPSS history
Timeline
  • 14 SEP 19:00Z
    The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote…
    cvelistv5