VDB
CVE-2010-0682
CVE-2010-0682
PUBLISHED
CVSS 4 MEDIUM
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.
EPSS 10.04% · 95.6th percentile
Risk Scores
CVSS 2.0
4
EPSS Score
10.04%
95.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| wordpress | wordpress | 2.9.1, 2.9.1, 2.9.1 |
Timeline
- Feb 13, 2010 PoC Published
- Feb 23, 2010 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
- Nov 1, 2023 EPSS Score
References
- FEDORA-2010-19329 vendor-advisory
- 38592 third-party-advisory
- 62330 vdb
- 42871 third-party-advisory
- https://core.trac.wordpress.org/ticket/11236 url
- https://nvd.nist.gov/vuln/detail/CVE-2010-0682 advisory
- http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security url
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html url
- http://wordpress.org/development/2010/02/wordpress-2-9-2 url
- http://wordpress.org/development/2010/02/wordpress-2-9-2/ patch
- http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/ technical
- http://tmacuk.co.uk/?p=180 technical