| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress | = 1.0= 1.0.1= 1.0.2= 1.2= 1.5= 1.5.1= 1.5.1.2 |
wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free