CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.0. It affects WordPress. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2012-6635
Severity
MEDIUM
CVSS
4
EPSS
1.76%
WordPress
Original NVD Description
wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft.