CVE-2007-1893 in WordPress

Résumé

par MITRE

xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functionality, which can be used to "publish a previously saved post."

Once again VulDB remains the best source for vulnerability data.

• Réserver: 09/04/2007
• Divulgation: 09/04/2007
• Modérer: accepté
• Entrée: VDB-36032
• CPE: prêt
• CWE: CWE-264 (confirmé)
• CVSS: 5.5 (VulDB)
• EPSS: 0.01165
• KEV: non
• Activités: très faible
• Secteur: Agriculture, Lawfirm, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-1893
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-1893
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-1893/