CVE-2012-3385

Published: Jul 22, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors.

Affected (85)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

85 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Up to 3.4.0
Wordpress Wordpress	Version 0.71
Wordpress Wordpress	Version 1.0.1
Wordpress Wordpress	Version 1.0.2
Wordpress Wordpress	Version 1.0
Wordpress Wordpress	Version 1.1.1
Wordpress Wordpress	Version 1.2.1
Wordpress Wordpress	Version 1.2.2
Wordpress Wordpress	Version 1.2.3
Wordpress Wordpress	Version 1.2.4
Wordpress Wordpress	Version 1.2.5
Wordpress Wordpress	Version 1.2.5 a
Wordpress Wordpress	Version 1.2
Wordpress Wordpress	Version 1.3.2
Wordpress Wordpress	Version 1.3.3
Wordpress Wordpress	Version 1.3
Wordpress Wordpress	Version 1.5.1.1
Wordpress Wordpress	Version 1.5.1.2
Wordpress Wordpress	Version 1.5.1.3
Wordpress Wordpress	Version 1.5.1
Wordpress Wordpress	Version 1.5.2
Wordpress Wordpress	Version 1.5
Wordpress Wordpress	Version 2.0.10
Wordpress Wordpress	Version 2.0.11
Wordpress Wordpress	Version 2.0.1
Wordpress Wordpress	Version 2.0.2
Wordpress Wordpress	Version 2.0.4
Wordpress Wordpress	Version 2.0.5
Wordpress Wordpress	Version 2.0.6
Wordpress Wordpress	Version 2.0.7
Wordpress Wordpress	Version 2.0.8
Wordpress Wordpress	Version 2.0.9
Wordpress Wordpress	Version 2.0
Wordpress Wordpress	Version 2.1.1
Wordpress Wordpress	Version 2.1.2
Wordpress Wordpress	Version 2.1.3
Wordpress Wordpress	Version 2.1
Wordpress Wordpress	Version 2.2.1
Wordpress Wordpress	Version 2.2.2
Wordpress Wordpress	Version 2.2.3
Wordpress Wordpress	Version 2.2
Wordpress Wordpress	Version 2.3.1
Wordpress Wordpress	Version 2.3.2
Wordpress Wordpress	Version 2.3.3
Wordpress Wordpress	Version 2.3
Wordpress Wordpress	Version 2.5.1
Wordpress Wordpress	Version 2.5
Wordpress Wordpress	Version 2.6.1
Wordpress Wordpress	Version 2.6.2
Wordpress Wordpress	Version 2.6.3
Wordpress Wordpress	Version 2.6.5
Wordpress Wordpress	Version 2.6
Wordpress Wordpress	Version 2.7.1
Wordpress Wordpress	Version 2.7
Wordpress Wordpress	Version 2.8.1
Wordpress Wordpress	Version 2.8.2
Wordpress Wordpress	Version 2.8.3
Wordpress Wordpress	Version 2.8.4
Wordpress Wordpress	Version 2.8.4 a
Wordpress Wordpress	Version 2.8.5.1
Wordpress Wordpress	Version 2.8.5.2
Wordpress Wordpress	Version 2.8.5
Wordpress Wordpress	Version 2.8.6
Wordpress Wordpress	Version 2.8
Wordpress Wordpress	Version 2.9.1.1
Wordpress Wordpress	Version 2.9.1
Wordpress Wordpress	Version 2.9.2
Wordpress Wordpress	Version 2.9
Wordpress Wordpress	Version 3.0.1
Wordpress Wordpress	Version 3.0.2
Wordpress Wordpress	Version 3.0.3
Wordpress Wordpress	Version 3.0.4
Wordpress Wordpress	Version 3.0.5
Wordpress Wordpress	Version 3.0.6
Wordpress Wordpress	Version 3.0
Wordpress Wordpress	Version 3.1.1
Wordpress Wordpress	Version 3.1.2
Wordpress Wordpress	Version 3.1.3
Wordpress Wordpress	Version 3.1.4
Wordpress Wordpress	Version 3.1
Wordpress Wordpress	Version 3.2.1
Wordpress Wordpress	Version 3.2
Wordpress Wordpress	Version 3.3.2
Wordpress Wordpress	Version 3.3.3
Wordpress Wordpress	Version 3.3

Related CWEs

CWE-264

References (6)

http://codex.wordpress.org/Version_3.4.1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/07/02/1

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/07/08/1

Source: secalert@redhat.com

http://codex.wordpress.org/Version_3.4.1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/07/02/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/07/08/1

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.