Skip to content
OpenAdvisories
Unscored DSA-1502-1 4 CVEs

wordpress - multiple vulnerabilities

Published Feb 22, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 wordpress 2.0.10-1etch1

Vulnerabilities 4

  • Unscored —
    CVE-2007-2821 Public exploit

    SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbit…

    wordpress Debian
  • Unscored —
    CVE-2007-3238

    Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authentic…

    wordpress Debian
  • Unscored —
    CVE-2008-0193 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x throug…

    wordpress Debian
  • Unscored —
    CVE-2008-0194

    Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read ar…

    wordpress Debian