CVE-2013-4340

wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and…

published September 12, 2013

CVSS
—
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified user_ID parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02630 · 85.4th percentile
Published
2013-09-12T10:00Z
EPSS history
Timeline
  • 12 SEP 10:00Z
    wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and…
    cvelistv5