Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2007-0540 — Wordpress vulnerability
6 documents6 sources
Severity
5.0MEDIUMNVD
EPSS
7.8%
top 8.04%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedJan 29
Latest updateMay 1
Description
WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data.
CVSS vector
AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9
Affected Packages3 packages
🔴Vulnerability Details
2GHSA▶
GHSA-9xf3-qrpw-5fjc: WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that cor↗2022-05-01
OSV▶
CVE-2007-0540: WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that cor↗2007-01-29
💥Exploits & PoCs
1Exploit-DB
▶
📋Vendor Advisories
1Debian▶
CVE-2007-0540: wordpress - WordPress allows remote attackers to cause a denial of service (bandwidth or thr...↗2007