Lucene search
Veracode Vulnerability DatabaseVERACODE:22271HistoryJan 09, 2020 - 6:53 a.m.
Authorization Bypass
2020-01-0906:53:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.002 Low
EPSS
Percentile
64.4%
wordpress is vulnerable to authorization bypass. A user without the publish_posts access rights is able to mark or unmark posts as sticky via the REST API.
Related
cvelist
cvelist
CVE-2019-16788
2020-01-09 02:25:12
wpvulndb
wpvulndb
WordPress <= 5.3 - Authenticated Improper Access Controls in REST API
2019-12-13 00:00:00
cve
cve
CVE-2019-16788
2020-01-09 03:15:13
nvd
nvd
CVE-2019-16788
2020-01-09 03:15:13
openvas
openvas
WordPress Multiple Vulnerabilities (Dec 2019) - Windows
2019-12-16 00:00:00
WordPress Multiple Vulnerabilities (Dec 2019) - Linux
2019-12-16 00:00:00