CVE-2007-1893
MEDIUM 4.9EPSS 1.2%
xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functionality, which can be used to "publish a previously saved post."
- CVSS v2.0
- 4.9 MEDIUM
AV:A/AC:M/Au:S/C:P/I:P/A:P - EPSS
- 1.17% chance of exploitation in the next 30 days, 65th percentile
- Nuclei
- low
- Published
- 2007-04-09
- Updated
- 2024-08-07