description: A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publish_posts' permission.
problem types: CWE-284
affected:
{
product: wordpress
vendor: n/a
versions:
status: affected, version: wordpress before 3.0.6 and 3.1.2
}