PT-2022-7723 · WordPress · Wordpress

Published 2022-04-18 · Updated 2022-04-25 · CVE-2011-1762

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Wordpress (affected versions not specified)

Description A flaw in Wordpress exists related to the 'wp-admin/press-this.php' script, which improperly checks user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had publish posts permission.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Incorrect Default Permissions

Weakness Enumeration

CWE-284

CWE-276

Related Identifiers

CVE-2011-1762

Affected Products

Wordpress

References · 5

• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1762 · Vendor Advisory
• https://wordpress.org/support/wordpress-version/version-3-1-2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1762 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1762 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1762 · Security Note