CVE-2010-0682: WordPress

Medium severity, CVSS 4.0. EPSS: 10% chance of exploitation in the next 30 days.

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.

Affected products

• WordPress WordPress: version 2.9 only; version 2.9.1 only

Published 2010-02-23. Last modified 2026-06-16.