Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2007-0109
5
MEDIUMCVSS v2
Published
January 9, 2007
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
wp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks.
WordPress/WordPress
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.
GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.= 2.0, = 2.0.2, = 2.0.1, = 2.0.4, = 2.0.5, = 2.0.3NVD