Multiple vulnerabilities have been reported in WordPress, which can potentially be exploited by malicious users to bypass certain security restrictions and disclose sensitive information.

1) An unspecified error in the application can be exploited to potentially disclose contents of private or draft posts to authors and contributors.

2) An error in checking user capabilities when handling XMLRPC requests can potentially be exploited to edit posts by users which don't have this capability.

The vulnerabilities are reported in versions prior to 3.4.1.

Solution
Update to version 3.4.1.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://wordpress.org/news/2012/06/wordpress-3-4-1/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers