CVE-2012-6635
MEDIUM 4.0EPSS 1.8%
wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft.
- CVSS v2.0
- 4.0 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N - EPSS
- 1.76% chance of exploitation in the next 30 days, 76th percentile
- Nuclei
- low
- Published
- 2014-01-21
- Updated
- 2024-09-17