| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress | ≤ 4.7.1 |
wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free