CVEvulnerability
CVE-2012-3385
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-07-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors.
Affected configurations
• wordpress wordpress (<= 3.4.0)
• wordpress wordpress 0.71
• wordpress wordpress 1.0
• wordpress wordpress 1.0.1
• wordpress wordpress 1.0.2
• wordpress wordpress 1.1.1
• wordpress wordpress 1.2
• wordpress wordpress 1.2.1
• wordpress wordpress 1.2.2
• wordpress wordpress 1.2.3
• wordpress wordpress 1.2.4
• wordpress wordpress 1.2.5
• wordpress wordpress 1.3
• wordpress wordpress 1.3.2
• wordpress wordpress 1.3.3
• wordpress wordpress 1.5
• wordpress wordpress 1.5.1
• wordpress wordpress 1.5.1.1
• wordpress wordpress 1.5.1.2
• wordpress wordpress 1.5.1.3
• wordpress wordpress 1.5.2
• wordpress wordpress 2.0
• wordpress wordpress 2.0.1
• wordpress wordpress 2.0.2
• wordpress wordpress 2.0.4
• wordpress wordpress 2.0.5
• wordpress wordpress 2.0.6
• wordpress wordpress 2.0.7
• wordpress wordpress 2.0.8
• wordpress wordpress 2.0.9
• wordpress wordpress 2.0.10
• wordpress wordpress 2.0.11
• wordpress wordpress 2.1
• wordpress wordpress 2.1.1
• wordpress wordpress 2.1.2
• wordpress wordpress 2.1.3
• wordpress wordpress 2.2
• wordpress wordpress 2.2.1
• wordpress wordpress 2.2.2
• wordpress wordpress 2.2.3
• wordpress wordpress 2.3
• wordpress wordpress 2.3.1
• wordpress wordpress 2.3.2
• wordpress wordpress 2.3.3
• wordpress wordpress 2.5
• wordpress wordpress 2.5.1
• wordpress wordpress 2.6
• wordpress wordpress 2.6.1
• wordpress wordpress 2.6.2
• wordpress wordpress 2.6.3
• wordpress wordpress 2.6.5
• wordpress wordpress 2.7
• wordpress wordpress 2.7.1
• wordpress wordpress 2.8
• wordpress wordpress 2.8.1
• wordpress wordpress 2.8.2
• wordpress wordpress 2.8.3
• wordpress wordpress 2.8.4
• wordpress wordpress 2.8.5
• wordpress wordpress 2.8.5.1
… and 23 more
Related
Weakness · not in database (1)
References
- http://codex.wordpress.org/Version_3.4.1 codex.wordpress.org
- http://www.openwall.com/lists/oss-security/2012/07/02/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/07/08/1 www.openwall.com
- http://codex.wordpress.org/Version_3.4.1 codex.wordpress.org
- http://www.openwall.com/lists/oss-security/2012/07/02/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/07/08/1 www.openwall.com