CVE-2014-0165

Published Apr 9, 2014 CVSS 2.0 · 4.0 Medium EPSS 2.4% KEV · Not listed
Description
WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2901-1 wordpress security update
Debian DSA Debian DSA DSA-2901-2 wordpress regression update
Debian DSA Debian DSA DSA-2901-3 wordpress regression update
EUVD EUVD EUVD-2014-0220 WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00626}

epss

{'score': 0.00706}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 9:05 AM
Reserved
Dec 3, 2013, 12:00 AM
Status
Modified
Published
Apr 10, 2014, 12:55 AM
Modified
Jun 17, 2026, 12:02 AM