CVE-2008-6762

MEDIUM 4.3CVE-2008-6762 · Published 28/04/2009 · updated 16/06/2026

In short

CVE-2008-6762 is a MEDIUM (CVSS 4.3) vulnerability affecting wordpress (wordpress).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wordpress wordpress	`= 2.6`	No fix yet

Description

Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backto parameter.

References

archives.neohapsis.com/archives/bugtraq/2008-12/0226.html · Exploit
osvdb.org/52213
debian.org/security/2009/dsa-1871
exchange.xforce.ibmcloud.com/vulnerabilities/50382

More vulnerabilities in wordpress

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wordpress

= 2.6

No fix yet

More vulnerabilities in wordpress

See all →