CVE-2011-5270
EPSS 0.51%Published: 1/21/2014Modified: 5/27/2026
Description
wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability requirement, which allows remote authenticated users to perform publish actions by leveraging the Contributor role.
Affected packages (1)
- Debian/wordpressfrom 0, < 3.2.1+dfsg-1