Vulnerability In All Versions of WordPress, Including 4.9.6

[travelin cat]

This is a limited vulnerability but anyone using multiple authors should double check your users with roles of Author and above.

[blog.ripstech.com...]

[KaseyM]

"The vulnerability was reported 7 months ago to the WordPress security team" - the core teams once again show how incompetent they are.