CVE-2012-6634 in WordPress
Summary
wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value.
Reservation
01/20/2014
Disclosure
01/20/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12080 | WordPress Media Attachment media-upload.php access control | 264 | Not defined | Official fix | CVE-2012-6634 |