Skip to content
OpenAdvisories
Unscored DSA-1285-1 5 CVEs

wordpress

Published May 1, 2007 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 wordpress 2.0.10-1

Vulnerabilities 5

  • Unscored —
    CVE-2007-1622 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in t…

  • Unscored —

    xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor ro…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in wp-includes/general-template.php in WordPress before 20070309 allows remote…

  • Unscored —
    CVE-2007-1897 Public exploit

    SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticate…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allo…