CVE-2013-2200 on Ubuntu 12.04 LTS (precise) - medium.
Description:
WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authenticated users to bypass intended restrictions on publishing and authorship reassignment via unspecified vectors.