CVE-2007-1599 — Wordpress vulnerability

5 documents5 sources

Severity

6.5MEDIUMNVD

EPSS

1.4%

top 19.24%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wordpress Debian Wordpress

Timeline

PublishedMar 22

Latest updateMay 1

Description

wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirect_to parameter.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages3 packages

▶debiandebian/wordpress< wordpress 2.2.2-1 (bookworm)

▶Debianwordpress/wordpress< 2.2.2-1+3

▶NVDwordpress/wordpress2.1.2

🔴Vulnerability Details

GHSA

GHSA-9wxp-5v2c-r6xv: wp-login↗2022-05-01

▶

OSV

CVE-2007-1599: wp-login↗2007-03-22

▶

📋Vendor Advisories

Debian

CVE-2007-1599: wordpress - wp-login.php in WordPress allows remote attackers to redirect authenticated user...↗2007

▶

💬Community

Bugzilla

CVE-2007-1599, CVE-2007-1622: wordpress vulnerabilities↗2007-03-23

▶