Skip to content
OpenAdvisories
Unscored DSA-1601-1 2 CVEs

wordpress - several vulnerabilities

Published Jul 4, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 wordpress 2.0.10-1etch3

Vulnerabilities 2

  • Unscored —

    wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obt…

  • Unscored —

    The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attacker…