CVE-2007-0541 - CVE House
Back to Database
Status published Medium CVE-2007-0541

WordPress allows remote attackers to determine the existence of arbitrary...

Vulnerability Description

WordPress allows remote attackers to determine the existence of arbitrary files, and possibly read portions of certain files, via pingback service calls with a source URI that corresponds to a local pathname, which triggers different fault codes for existing and non-existing files, and in certain configurations causes a brief file excerpt to be published as a blog comment.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-0541

Credits & Attribution

No credits recorded in the NVD database.

References

More from wordpress

View All →
CVE-2021-44223
WordPress before 5.8 lacks support for the Update URI plugin...
High 8.1
CVE-2020-28040
WordPress before 5.5.2 allows CSRF attacks that change a theme's...
Medium 4.3
CVE-2020-28039
is_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file...
Critical 9.1
CVE-2020-28038
WordPress before 5.5.2 allows stored XSS via post slugs....
Medium 6.1
CVE-2020-28037
is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether...
Critical 9.8

Affected Vendor

Affected Software

wordpress
Vulnerable Versions:
0

Timeline

Official Publish: January 29th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.