CVE-2010-0682

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter.

Date published : 2010-02-23

http://wordpress.org/development/2010/02/wordpress-2-9-2/

https://core.trac.wordpress.org/ticket/11236