Vulners
Lucene search
2 matches found
CVE-2015-5715
The mweditPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors...
4.3CVSS4.9AI score0.28517EPSS
Exploits0References11
Design/Logic Flaw
The mweditPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors...
4CVSS6.5AI score0.28517EPSS
Exploits0References9Affected Software1
20