CVE-2008-0664
published 2008-02-08CVE-2008-0664: The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via…
PriorityP430medium6.4CVSS 2.0
AVNACLAuNCPIPAN
EPSS
3.55%
88.0th percentile
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | wordpress | < wordpress 2.3.3-1 (bookworm) | wordpress 2.3.3-1 (bookworm) |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
| wordpress | wordpress | — | — |
CVSS provenance
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
osv6.4MEDIUM
vendor_debian6.4MEDIUM
vendor_redhat6.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
wordpress: XML-RPC interface vulnerability
vendor_redhat·2008-02-05·CVSS 6.4
CVE-2008-0664 [MEDIUM] wordpress: XML-RPC interface vulnerability
wordpress: XML-RPC interface vulnerability
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
Debian
CVE-2008-0664: wordpress - The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registra...
vendor_debian·2008·CVSS 6.4
CVE-2008-0664 [MEDIUM] CVE-2008-0664: wordpress - The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registra...
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
Scope: local
bookworm: resolved (fixed in 2.3.3-1)
bullseye: resolved (fixed in 2.3.3-1)
forky: resolved (fixed in 2.3.3-1)
sid: resolved (fixed in 2.3.3-1)
trixie: resolved (fixed in 2.3.3-1)
GHSA
GHSA-4v2q-r7pp-6g8x: The XML-RPC implementation (xmlrpc
ghsa_unreviewed·2022-05-01
CVE-2008-0664 [MEDIUM] GHSA-4v2q-r7pp-6g8x: The XML-RPC implementation (xmlrpc
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
OSV
CVE-2008-0664: The XML-RPC implementation (xmlrpc
osv·2008-02-08·CVSS 6.4
CVE-2008-0664 [MEDIUM] CVE-2008-0664: The XML-RPC implementation (xmlrpc
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
No detection rules found.
No public exploits indexed.
http://secunia.com/advisories/28823http://secunia.com/advisories/28920http://secunia.com/advisories/30960http://wordpress.org/development/2008/02/wordpress-233/http://www.debian.org/security/2008/dsa-1601http://www.securityfocus.com/bid/27669http://www.securitytracker.com/id?1019316http://www.village-idiot.org/archives/2008/02/02/wordpress-232-exploit-confirmed/http://www.vupen.com/english/advisories/2008/0448https://bugzilla.redhat.com/show_bug.cgi?id=431547https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00349.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00416.htmlhttp://secunia.com/advisories/28823http://secunia.com/advisories/28920http://secunia.com/advisories/30960http://wordpress.org/development/2008/02/wordpress-233/http://www.debian.org/security/2008/dsa-1601http://www.securityfocus.com/bid/27669http://www.securitytracker.com/id?1019316http://www.village-idiot.org/archives/2008/02/02/wordpress-232-exploit-confirmed/http://www.vupen.com/english/advisories/2008/0448https://bugzilla.redhat.com/show_bug.cgi?id=431547https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00349.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-February/msg00416.html
2008-02-08
Published