Wordpress : Security Vulnerabilities, CVEs, Published In May 2005 CVSS score >= 1
Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.
Max CVSS
5.0
EPSS Score
0.36%
Published
2005-05-20
Updated
2023-12-28
SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter.
Max CVSS
7.5
EPSS Score
0.32%
Published
2005-05-20
Updated
2016-10-18
Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.
Max CVSS
6.8
EPSS Score
0.48%
Published
2005-05-02
Updated
2016-10-18
3 vulnerabilities found