CVE-2007-4139

Description

References

• mybeni.rootzilla.de/mybeNi/2007/wordpress_zeroday_vulnerability_roundhouse_kick_and_why_i_nearly_wrote_the_first_blog_worm · Exploit
• osvdb.org/36621
• secunia.com/advisories/26296 · Vendor Advisory
• trac.wordpress.org/attachment/ticket/4689/4689.diff
• trac.wordpress.org/ticket/4689 · Exploit
• securityfocus.com/bid/25158
• vupen.com/english/advisories/2007/2744
• exchange.xforce.ibmcloud.com/vulnerabilities/35718

wordpress의 다른 취약점

• CVE-2026-87902높음 8.1EXPLOITED (CISA KEV)An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the …
• CVE-2026-63030심각 9.8EXPLOITED (CISA KEV)WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the …
• CVE-2026-60137보통 5.9EXPLOITED (CISA KEV)WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query…
• CVE-2022-4973보통 5.4WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with acce…
• CVE-2024-4439보통 6.1WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due t…