NA
CVSSv3

CVE-2007-0109

CVSSv4: NA | CVSSv3: NA | CVSSv2: 5 | VMScore: 600 | EPSS: 0.01283 | KEV: Not Included
Published: 09/01/2007 Updated: 21/11/2024

Vulnerability Summary

wp-login.php in WordPress 2.0.5 and previous versions displays different error messages if a user exists or not, which allows remote malicious users to obtain sensitive information and facilitates brute force attacks.

Vulnerable Product Search on Vulmon Subscribe to Product

wordpress wordpress 2.0

wordpress wordpress 2.0.1

wordpress wordpress 2.0.2

wordpress wordpress 2.0.3

wordpress wordpress 2.0.4

wordpress wordpress 2.0.5