First published: Mon Jan 29 2007(Updated: )
WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
WordPress | <=2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-0540 is classified as a moderate severity vulnerability due to its potential for denial of service.
To fix CVE-2007-0540, you should upgrade to WordPress version 2.1 or later.
CVE-2007-0540 facilitates denial of service attacks that exploit the pingback feature.
CVE-2007-0540 affects all WordPress versions up to and including 2.0.
Any WordPress installations running version 2.0 or earlier are vulnerable to CVE-2007-0540.