Files
CVEs-PoC/2011/CVE-2011-0701.md
2025-09-29 21:09:30 +02:00

658 B

CVE-2011-0701

Description

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.

POC

Reference

No PoCs from references.

Github