WordPress REST API Posts Controller Privilege Escalation

A privilege escalation vulnerability exists in WordPress. The vulnerability is due to improper handling of post id's within the REST API posts controller. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to a vulnerable WordPress website...

WordPress 'class-wp-rest-posts-controller.php' elevation of privilege vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An elevation of privilege vulnerability exists in WordPress 'class-wp-rest-posts-controller.php'. An attacker...