Test ID:	1.3.6.1.4.1.25623.1.0.100505
Category:	Web application abuses
Title:	WordPress Trashed Posts Information Disclosure Vulnerability
Summary:	WordPress is prone to an information disclosure vulnerability because; it fails to properly restrict access to trashed posts.
Description:	Summary: WordPress is prone to an information disclosure vulnerability because it fails to properly restrict access to trashed posts. Vulnerability Impact: An attacker can exploit this vulnerability to view other authors' trashed posts, which may aid in further attacks. Affected Software/OS: Versions prior to WordPress 2.9.2 are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0682 http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/ http://tmacuk.co.uk/?p=180 http://www.osvdb.org/62330 http://secunia.com/advisories/38592 http://secunia.com/advisories/42871
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.