Description
WordPress is prone to a security bypass vulnerability because the application fails to properly perform user-profile checks. Exploiting this issue could allow an attacker to perform otherwise restricted actions and subsequently publish posts under certain circumstances. Note that successful exploitation requires 'Contributor-level' privileges. WordPress versions prior to 3.1.2 are vulnerable.
Remediation
Update to WordPress version 3.0.6, 3.1.2 or latest
References
Related Vulnerabilities
MySQL CVE-2019-2530 Vulnerability (CVE-2019-2530)
WordPress Plugin PowerPress Podcasting by Blubrry Unspecified Vulnerability (8.6.1)
Moodle Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9187)
MySQL CVE-2015-0500 Vulnerability (CVE-2015-0500)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-0796)