CVE-2010-0682

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.

• CWE-264

• http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html
• http://secunia.com/advisories/38592Vendor Advisory
• http://secunia.com/advisories/42871
• http://tmacuk.co.uk/?p=180
• http://wordpress.org/development/2010/02/wordpress-2-9-2/Patch, Vendor Advisory
• http://www.osvdb.org/62330
• https://core.trac.wordpress.org/ticket/11236
• http://hakre.wordpress.com/2010/02/16/the-short-memory-of-wordpress-org-security/
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html
• http://secunia.com/advisories/38592Vendor Advisory
• http://secunia.com/advisories/42871
• http://tmacuk.co.uk/?p=180
• http://wordpress.org/development/2010/02/wordpress-2-9-2/Patch, Vendor Advisory
• http://www.osvdb.org/62330
• https://core.trac.wordpress.org/ticket/11236

Published

Feb 23, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0676Directory traversal vulnerability in index.php in the RWCard…
• CVE-2010-0677SQL injection vulnerability in index.php in Katalog Stron Hu…
• CVE-2010-0678PHP remote file inclusion vulnerability in includes/moderati…
• CVE-2010-0679Multiple stack-based buffer overflows in the HyleosChemView.…
• CVE-2010-0680Directory traversal vulnerability in index.php in ZeusCMS 0.…
• CVE-2010-0681ZeusCMS 0.2 stores sensitive information under the web root …
• CVE-2010-0683Unspecified vulnerability in TIBRepoServer5.jar in TIBCO Adm…
• CVE-2010-0684Cross-site scripting (XSS) vulnerability in createDestinatio…
• CVE-2010-0685The design of the dialplan functionality in Asterisk Open So…
• CVE-2010-0686WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Serv…
• CVE-2010-0688Stack-based buffer overflow in Orbital Viewer 1.04 allows us…
• CVE-2010-0689The ExecuteExe method in the DVBSExeCall Control ActiveX con…