WordPress 3.1 prior to 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote malicious users to obtain sensitive data via vectors related to wp-includes/post.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
wordpress wordpress 3.1 |
||
wordpress wordpress 3.1.1 |
||
wordpress wordpress 3.1.2 |
||
wordpress wordpress 3.2 |