Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-79895
HistoryApr 21, 2022 - 12:00 a.m.

Wordpress permission check error vulnerability

2022-04-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

22.7%

WordPress is the WordPress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers, and a permission checking error vulnerability exists in Wordpress, which stems from the wp-admin/press-this.php script that incorrectly checks user permissions when posting. An attacker could exploit this vulnerability to allow users with “participant level” permissions to post.

0.001 Low

EPSS

Percentile

22.7%