Debian/wordpress: unknown

SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users to execute arbitrary SQL commands via a string parameter value in an XML

Action: Upgrade wordpress to 2.1.3-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1897#Debian:13/wordpress
• https://security-tracker.debian.org/tracker/CVE-2007-1897

published 2007-04-09T20:19:00Z · modified 2026-10-21T17:47:39.766621279Z · JSON