Wordpress : Security Vulnerabilities, CVEs, Published In April 2007 (Sql injection)
SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users to execute arbitrary SQL commands via a string parameter value in an XML RPC mt.setPostCategories method call, related to the post_id variable.
Max CVSS
6.5
EPSS Score
2.11%
Published
2007-04-09
Updated
2017-10-11
1 vulnerabilities found