CVE-2013-2200
WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship re…
Published: 2013-07-08 · CVSS: Unscored
WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reassignment via unspecified vectors.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7