{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"wordpress","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5N8Z1BHEC2VAVJ4Y5S1V9WH","modified_at":"2026-10-23T17:47:50.948010264Z","published_at":"2008-01-10T00:46:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-0191","https://security-tracker.debian.org/tracker/CVE-2008-0191"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-0191","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-0191"}],"summary":"WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database stru"}