Restrict some post IDs when dealing with media uploading, which could leak some info (or attach media to a post the user doesn’t have privileges to).

http://core.trac.wordpress.org/changeset/21087/branches/3.3

This vulnerability affects the following application versions:

  • WordPress 3.0
  • WordPress 3.0.1
  • WordPress 3.0.2
  • WordPress 3.0.3
  • WordPress 3.0.4
  • WordPress 3.0.5
  • WordPress 3.0.6
  • WordPress 3.1
  • WordPress 3.1.1
  • WordPress 3.1.2
  • WordPress 3.1.3
  • WordPress 3.1.4
  • WordPress 3.2
  • WordPress 3.2.1
  • WordPress 3.3
  • WordPress 3.3.1
  • WordPress 3.3.2

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *