Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability management ShadowTrackr CVSS score

wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (CPU consumption) via a crafted value of a certain wp-postpass cookie.

CVSS

0.0

ShadowTrackr

CISA KEV

NCSC.nl

Patch StatusUnavailable

Change Log

Date	Source	Changes	Score
2026-07-21	PoC	E: U→P	0.0 → 0.0
2026-07-21	cve.org	initial, patch: Unavailable	0.0

References: CVE.org · NVD · PoC

Affected Software

Vendor	Product	Version
wordpress	wordpress	3.5.1

Published: 2013-06-21

Search the CVE vulnerability database

CVE-2013-2173