Debian/wordpress: critical 9.8

Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then gene

Action: Upgrade wordpress to 2.5.0-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-6013
• https://security-tracker.debian.org/tracker/CVE-2007-6013

published 2007-11-19T21:46:00Z · modified 2026-10-21T18:01:09.634282924Z · JSON