CVE-2010-5293

CVE-2010-5293

This page contains facts from public vulnerability sources. Check the original advisory before updating.

wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match.

EPSS 2.5% · Fix available

Published

2014-01-21T01:00:00.000Z

Updated

2024-09-16T16:23:45.618Z

Stack: system

Check your server →