Debian/wordpress: unknown

xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functional

Action: Upgrade wordpress to 2.1.3-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1893
• https://security-tracker.debian.org/tracker/CVE-2007-1893

published 2007-04-09T20:19:00Z · modified 2026-10-21T17:47:49.939858085Z · JSON