ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

← Back to results

CVE-2005-2612

Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.
-
CVSS
0.0
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
Patch StatusUnavailable

Change Log
DateSourceChangesScore
2026-07-21metasploitE: P→A0.0 → 0.0
2026-07-21exploitdbE: U→P0.0 → 0.0
2026-07-21cve.orginitial, patch: Unavailable0.0

Affected Software
VendorProductVersion
wordpresswordpress1.0
wordpresswordpress1.0.1
wordpresswordpress1.0.2
wordpresswordpress1.2
wordpresswordpress1.5
wordpresswordpress1.5.1
wordpresswordpress1.5.1.2
wordpresswordpress1.5.1.3
Published: 2005-08-17