Wordpress: >> Wordpress >> 2.2_revision5002 Security Vulnerabilities
Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the post_type parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters."
CVSS Score
7.5
EPSS Score
0.036
Published
2007-09-14
Cross-site scripting (XSS) vulnerability in wp-includes/general-template.php in WordPress before 20070309 allows remote attackers to inject arbitrary web script or HTML via the year parameter in the wp_title function.
CVSS Score
4.3
EPSS Score
0.055
Published
2007-04-09
Page 2