Files
CVEs-PoC/2012/CVE-2012-6635.md
2025-09-29 21:09:30 +02:00

680 B

CVE-2012-6635

Description

wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft.

POC

Reference

No PoCs from references.

Github