cbcvebase.
CVE-2012-6634
published 2014-01-21

CVE-2012-6634: wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions…

PriorityP429medium6.4CVSS 2.0
AVNACLAuNCPIPAN
EPSS
2.50%
82.9th percentile
wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value.

Affected

22 ranges
VendorProductVersion rangeFixed in
debianwordpress< wordpress 3.4+dfsg-1 (bookworm)wordpress 3.4+dfsg-1 (bookworm)
wordpresswordpress<= 3.3.2—
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress>= 0 < 3.4+dfsg-13.4+dfsg-1
wordpresswordpress>= 0 < 3.4+dfsg-13.4+dfsg-1
wordpresswordpress>= 0 < 3.4+dfsg-13.4+dfsg-1
wordpresswordpress>= 0 < 3.4+dfsg-13.4+dfsg-1

CVSS provenance

nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
osv6.4MEDIUM
vendor_debian6.4MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.