WordPress core
CVE-2010-0682
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.
- Severity
- Medium 4.0
- Published
- 23 Feb 2010
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 17 Oct 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
WordPressWordPress core · cpe:a:wordpress:wordpress |
|