cbcvebase.
CVE-2012-6635
published 2014-01-21

CVE-2012-6635: wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated…

PriorityP417medium4CVSS 2.0
AVNACLAuSCPINAN
EPSS
2.12%
79.8th percentile
wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft.

Affected

22 ranges
VendorProductVersion rangeFixed in
debianwordpress< wordpress 3.4+dfsg-1 (bookworm)wordpress 3.4+dfsg-1 (bookworm)
wordpresswordpress<= 3.3.2—
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress——
wordpresswordpress>= 0 < 3.4+dfsg-13.4+dfsg-1
wordpresswordpress>= 0 < 3.4+dfsg-13.4+dfsg-1
wordpresswordpress>= 0 < 3.4+dfsg-13.4+dfsg-1
wordpresswordpress>= 0 < 3.4+dfsg-13.4+dfsg-1

CVSS provenance

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
osv4.0MEDIUM
vendor_debian4.0MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.