CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.0. It affects WordPress. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2011-5270
Severity
MEDIUM
CVSS
4
EPSS
1.49%
WordPress
Original NVD Description
wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability requirement, which allows remote authenticated users to perform publish actions by leveraging the Contributor role.