CVE-2007-4014

no score yetEPSS 2.6%

wordpress: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
Published: 2007-07-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

wordpress:blix
wordpress:blixed
wordpress:blixkrieg

References

http://secunia.com/advisories/26109
http://secunia.com/advisories/26115
http://secunia.com/advisories/26116
http://www.osvdb.org/37056
http://www.osvdb.org/37057

Check your stack JSON