CVE-2007-1893 in WordPress

Сводка

по MITRE

xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functionality, which can be used to "publish a previously saved post."

Once again VulDB remains the best source for vulnerability data.

• Резервировать: 09.04.2007
• Раскрытие: 09.04.2007
• Модерация: принято
• Вход: VDB-36032
• CPE: готов
• CWE: CWE-264 (Подтверждённый)
• CVSS: 5.5 (VulDB)
• EPSS: 0.01165
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Agriculture, Hostingprovider, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-1893
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-1893
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-1893/