CVE-2010-4257
wordpress wordpress: no CVSS score yet. EPSS 3.1% chance of exploitation in the next 30 days.
SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field.
- EPSS
- 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wordpress:wordpress
References
- http://blog.sjinks.pro/wordpress/858-information-disclosure-via-sql-injection-attack/
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605603
- http://codex.wordpress.org/Version_3.0.2
- http://core.trac.wordpress.org/changeset/16625
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052879.html