CVE-2007-0541
Last modified
CVE-2007-0541 is a vulnerability of currently unknown severity. WordPress allows remote attackers to determine the existence of arbitrary files, and possibly read portions of certain files, via pingback service calls with a source URI that corresponds to a local pathname, which triggers different fault codes for existing and non-existing files, and in certain configurations causes a brief file excerpt to be published as a blog comment.. EPSS estimates a 2.52% chance of exploitation in the next 30 days.
Description
WordPress allows remote attackers to determine the existence of arbitrary files, and possibly read portions of certain files, via pingback service calls with a source URI that corresponds to a local pathname, which triggers different fault codes for existing and non-existing files, and in certain configurations causes a brief file excerpt to be published as a blog comment.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wordpress | Wordpress | <= 2.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0541?
How severe is CVE-2007-0541?
How do I fix CVE-2007-0541?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0535Multiple eval injection vulnerabilities in Vote! Pro 4.0, an…
- CVE-2007-0536The chroot helper in rMake for rPath Linux 1 does not drop s…
- CVE-2007-0537The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, …
- CVE-2007-0538Telligent Community Server 2.1 and earlier allows remote att…
- CVE-2007-0539The wp_remote_fopen function in WordPress before 2.1 allows …
- CVE-2007-0540WordPress allows remote attackers to cause a denial of servi…
- CVE-2007-0542Cross-site scripting (XSS) vulnerability in show.php in 212c…
- CVE-2007-0543ZixForum 1.14 and earlier stores sensitive information under…
- CVE-2007-0544Cross-site scripting (XSS) vulnerability in private.php in M…
- CVE-2007-0545Maxtricity Tagger 0.1 stores sensitive information under the…
- CVE-2007-0546Toxiclab Shoutbox 1 stores sensitive information under the w…
- CVE-2007-0547Cross-site scripting (XSS) vulnerability in CGI-RESCUE WebFO…
Are you affected by CVE-2007-0541?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST