CVE-2010-5293
EPSS 0.39%Published: 1/21/2014Modified: 5/27/2026
Description
wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match.
Affected packages (1)
- Debian/wordpressfrom 0, < 3.0.2-1