Bypass Access Restrictions

Wordpress is vulnerable to bypassing access restrictions. The bypass is possible because the application does not properly check the editposts capability for auto-draft creation actions...