CVE-2014-0165: Undefined Security Weakness

WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php...

PT-2014-3510

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.7.2 WordPress versions 3.8.x prior to 3.8.2 Description The issue allows remote authenticated users to publish posts by leveraging the Contributor role. This is related to the files wp-admin/includes/post.php and...

CVE-2013-4340: Undefined Security Weakness

wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified userID parameter...

PT-2013-4962

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.6.1 Description The issue allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified user ID parameter in the wp-admin/includes/post.php file...