CVE-2013-2200

WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing…

published July 8, 2013

CVSS
—
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reassignment via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01765 · 77.9th percentile
Published
2013-07-08T20:00Z
EPSS history
Timeline
  • 08 JUL 20:00Z
    WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing…
    cvelistv5