CVE-2007-1244: XSS
Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileged actions as administrators, as demonstrated using the delete action in wp-admin/post.php. NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks and steal cookies via the post parameter.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1244?
CVE-2007-1244 has a high severity rating as it allows remote attackers to perform privileged actions on WordPress.
How do I fix CVE-2007-1244?
To fix CVE-2007-1244, upgrade to WordPress version 2.1.2 or later, which addresses the CSRF vulnerability.
What types of attacks can be executed due to CVE-2007-1244?
CVE-2007-1244 can facilitate Cross-Site Request Forgery attacks, allowing remote attackers to execute unauthorized privileged actions.
Which versions of WordPress are affected by CVE-2007-1244?
CVE-2007-1244 affects WordPress versions 2.1.1 and earlier.
What is Cross-Site Request Forgery in the context of CVE-2007-1244?
Cross-Site Request Forgery in CVE-2007-1244 refers to an attack where unauthorized commands are transmitted from a user that the web application trusts.