CVE-2012-6634

wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value.

CVSS v2.0

6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS

2.05% chance of exploitation in the next 30 days, 80th percentile

Nuclei

medium

Published

2014-01-21

Updated

2024-09-16

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2012/CVE-2012-6634-wordpress-30…

References

• CVE Record
• NVD entry

Related

• CVE-2012-6633
• CVE-2012-6635
• CVE-2012-6626
• CVE-2012-6636
• CVE-2012-6625
• CVE-2012-6643