Looking for the vulnerability index of Invicti's legacy products?
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5293) - Vulnerability Database

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5293)

Description

wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match.

References

Related Vulnerabilities