CVE-2006-2702
EPSS 1.4%Published: 5/31/2006Modified: 5/27/2026
Description
vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PC_REMOTE_ADDR HTTP header, which vars.php uses to redefine $_SERVER['REMOTE_ADDR'].
Affected packages (1)
- Debian/wordpressfrom 0, < 2.0.3-1