ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

← Back to results

CVE-2007-0109

wp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks.
-
CVSS
0.0
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
Patch StatusUnavailable

Change Log
DateSourceChangesScore
2026-07-21cve.orginitial, patch: Unavailable0.0

Affected Software
VendorProductVersion
wordpresswordpress2.0
wordpresswordpress2.0.1
wordpresswordpress2.0.2
wordpresswordpress2.0.3
wordpresswordpress2.0.4
wordpresswordpress2.0.5
Published: 2007-01-09