CVE-2012-4421

🗓️ 14 Sep 2012 19:01:55Reported by [email protected]Type

The create_post function in WordPress before 3.4.2 allows remote authenticated users to bypass access restrictions

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
UbuntuCve	CVE-2012-4421	14 Sep 201200:00	–	ubuntucve
CVE	CVE-2012-4421	14 Sep 201219:55	–	cve
OpenVAS	WordPress < 3.4.2 Access Restriction Bypass Vulnerability	8 Dec 202200:00	–	openvas
Patchstack	WordPress <= 3.4.1 - BYPASS	21 Aug 201200:00	–	patchstack
Debian CVE	CVE-2012-4421	14 Sep 201219:55	–	debiancve
Prion	Design/Logic Flaw	14 Sep 201219:55	–	prion
Cvelist	CVE-2012-4421	14 Sep 201219:00	–	cvelist
Tenable Nessus	WordPress < 3.4.2 Multiple Vulnerabilities	12 Sep 201200:00	–	nessus

Nvd

Node

wordpress wordpressRange≤3.4.1

wordpress wordpressMatch0.71

wordpress wordpressMatch1.0

wordpress wordpressMatch1.0.1

wordpress wordpressMatch1.0.2

wordpress wordpressMatch1.1.1

wordpress wordpressMatch1.2

wordpress wordpressMatch1.2.1

wordpress wordpressMatch1.2.2

wordpress wordpressMatch1.2.3

wordpress wordpressMatch1.2.4

wordpress wordpressMatch1.2.5

wordpress wordpressMatch1.2.5a

wordpress wordpressMatch1.3

wordpress wordpressMatch1.3.2

wordpress wordpressMatch1.3.3

wordpress wordpressMatch1.5

wordpress wordpressMatch1.5.1

wordpress wordpressMatch1.5.1.1

wordpress wordpressMatch1.5.1.2

wordpress wordpressMatch1.5.1.3

wordpress wordpressMatch1.5.2

wordpress wordpressMatch2.0

wordpress wordpressMatch2.0.1

wordpress wordpressMatch2.0.2

wordpress wordpressMatch2.0.4

wordpress wordpressMatch2.0.5

wordpress wordpressMatch2.0.6

wordpress wordpressMatch2.0.7

wordpress wordpressMatch2.0.8

wordpress wordpressMatch2.0.9

wordpress wordpressMatch2.0.10

wordpress wordpressMatch2.0.11

wordpress wordpressMatch2.1

wordpress wordpressMatch2.1.1

wordpress wordpressMatch2.1.2

wordpress wordpressMatch2.1.3

wordpress wordpressMatch2.2

wordpress wordpressMatch2.2.1

wordpress wordpressMatch2.2.2

wordpress wordpressMatch2.2.3

wordpress wordpressMatch2.3

wordpress wordpressMatch2.3.1

wordpress wordpressMatch2.3.2

wordpress wordpressMatch2.3.3

wordpress wordpressMatch2.5

wordpress wordpressMatch2.5.1

wordpress wordpressMatch2.6

wordpress wordpressMatch2.6.1

wordpress wordpressMatch2.6.2

wordpress wordpressMatch2.6.3

wordpress wordpressMatch2.6.5

wordpress wordpressMatch2.7

wordpress wordpressMatch2.7.1

wordpress wordpressMatch2.8

wordpress wordpressMatch2.8.1

wordpress wordpressMatch2.8.2

wordpress wordpressMatch2.8.3

wordpress wordpressMatch2.8.4

wordpress wordpressMatch2.8.4a

wordpress wordpressMatch2.8.5

wordpress wordpressMatch2.8.5.1

wordpress wordpressMatch2.8.5.2

wordpress wordpressMatch2.8.6

wordpress wordpressMatch2.9

wordpress wordpressMatch2.9.1

wordpress wordpressMatch2.9.1.1

wordpress wordpressMatch2.9.2

wordpress wordpressMatch3.0

wordpress wordpressMatch3.0.1

wordpress wordpressMatch3.0.2

wordpress wordpressMatch3.0.3

wordpress wordpressMatch3.0.4

wordpress wordpressMatch3.0.5

wordpress wordpressMatch3.0.6

wordpress wordpressMatch3.1

wordpress wordpressMatch3.1.1

wordpress wordpressMatch3.1.2

wordpress wordpressMatch3.1.3

wordpress wordpressMatch3.1.4

wordpress wordpressMatch3.2

wordpress wordpressMatch3.2.1

wordpress wordpressMatch3.3

wordpress wordpressMatch3.3.1

wordpress wordpressMatch3.3.2

wordpress wordpressMatch3.3.3

wordpress wordpressMatch3.4.0

Source	Link
openwall	www.openwall.com/lists/oss-security/2012/09/13/4
core	www.core.trac.wordpress.org/changeset
codex	www.codex.wordpress.org/Version_3.4.2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Sep 2012 19:55Current

6.1Medium risk

Vulners AI Score6.1

CVSS24

EPSS0.00242

CWE-264