CVE-2007-5105

MEDIUM 4.3CVE-2007-5105 · Published 26/09/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
wordpress wordpress	`= 2.0= 2.0.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the user_email parameter.

References

blogsecurity.net/wordpress/2-vanilla-xss-on-wordpress-wp-registerphp
securityreason.com/securityalert/3175
securityfocus.com/archive/1/480327/100/0/threaded
securityfocus.com/bid/25769
exchange.xforce.ibmcloud.com/vulnerabilities/36742
exchange.xforce.ibmcloud.com/vulnerabilities/36743

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free