WordPress core
CVE-2011-1762
A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.
- Severity
- Medium 6.5
- Published
- 18 Apr 2022
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 17 Oct 2026
- Fixed in
- 3.0.6, 3.1.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
WordPressWordPress core · cpe:a:wordpress:wordpress |
|