CVE-2011-5270

wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publishposts capability requirement, which allows remote authenticated users to perform publish actions by leveraging the Contributor role...

PT-2014-2187

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.0.6 Description The issue concerns a capability requirement not being enforced in a specific PHP file, allowing remote authenticated users with the Contributor role to perform publish actions. Recommendations For...

CVE-2011-5270: Undefined Security Weakness

wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publishposts capability requirement, which allows remote authenticated users to perform publish actions by leveraging the Contributor role...