CVE-2011-1762: WordPress

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.

Affected products

• WordPress WordPress: before 3.0.6 (fixed in 3.0.6); from 3.1, before 3.1.2 (fixed in 3.1.2)

Published 2022-04-18. Last modified 2026-06-16.