6.4
CVSSv2

CVE-2008-0664

Published: 08/02/2008 Updated: 21/11/2024

Vulnerability Summary

The XML-RPC implementation (xmlrpc.php) in WordPress prior to 2.3.3, when registration is enabled, allows remote malicious users to edit posts of other blog users via unknown vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

wordpress wordpress 0.7

wordpress wordpress 0.71

wordpress wordpress 1.2

wordpress wordpress 1.2.1

wordpress wordpress 1.2.2

wordpress wordpress 1.3.1

wordpress wordpress 1.5

wordpress wordpress 1.5.1

wordpress wordpress 1.5.1.2

wordpress wordpress 1.5.1.3

wordpress wordpress 1.5.2

wordpress wordpress 2.0

wordpress wordpress 2.0.1

wordpress wordpress 2.0.2

wordpress wordpress 2.0.3

wordpress wordpress 2.0.4

wordpress wordpress 2.0.5

wordpress wordpress 2.0.6

wordpress wordpress 2.0.7

wordpress wordpress 2.0.10

wordpress wordpress 2.0.10 rc1

wordpress wordpress 2.0.10 rc2

wordpress wordpress 2.0.11

wordpress wordpress 2.1

wordpress wordpress 2.1.1

wordpress wordpress 2.1.2

wordpress wordpress 2.1.3

wordpress wordpress 2.1.3 rc1

wordpress wordpress 2.1.3 rc2

wordpress wordpress 2.2

wordpress wordpress 2.2.1

wordpress wordpress 2.2.2

wordpress wordpress 2.2.3

wordpress wordpress 2.2 revision5002

wordpress wordpress 2.2 revision5003

wordpress wordpress 2.3

wordpress wordpress 2.3.1

wordpress wordpress 2.3.2

Vendor Advisories

Debian Bug report logs - #504771 wordpress can be subject of delayed attacks via cookies Package: wordpress; Maintainer for wordpress is Craig Small <csmall@debianorg>; Source for wordpress is src:wordpress (PTS, buildd, popcon) Reported by: Raphael Geissert <atomo64@gmailcom> Date: Fri, 7 Nov 2008 02:42:04 UTC S ...
Debian Bug report logs - #464170 wordpress: security flaw in xml-rpc implementation Package: wordpress; Maintainer for wordpress is Craig Small <csmall@debianorg>; Source for wordpress is src:wordpress (PTS, buildd, popcon) Reported by: Nico Golde <nion@debianorg> Date: Tue, 5 Feb 2008 16:09:01 UTC Severity: grav ...
Debian Bug report logs - #531736 CVE-2008-6767, CVE-2008-6762 Package: wordpress; Maintainer for wordpress is Craig Small <csmall@debianorg>; Source for wordpress is src:wordpress (PTS, buildd, popcon) Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Wed, 3 Jun 2009 17:27:02 UTC Severity: normal Tags: s ...
Debian Bug report logs - #536724 wordpress: CORE-2009-0515 priviledges unchecked and multiple information disclosures Package: wordpress; Maintainer for wordpress is Craig Small <csmall@debianorg>; Source for wordpress is src:wordpress (PTS, buildd, popcon) Reported by: "Michael S Gilbert" <michaelsgilbert@gmailcom&g ...