UpHeron
All vulnerabilities

WordPress core

CVE-2011-5270

wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability requirement, which allows remote authenticated users to perform publish actions by leveraging the Contributor role.

Severity
Medium 4.0
Published
21 Jan 2014
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Every version up to 3.0.5
  • Version 3.0
  • Version 3.0.1
  • Version 3.0.2
  • Version 3.0.3
  • Version 3.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2011-5270
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2011-5270