ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

← Back to results

CVE-2006-1263

Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
An official patch is available. Apply the patch as soon as possible.
-
CVSS
0.0
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
Patch StatusOfficial Patch

Change Log
DateSourceChangesScore
2026-07-21nvdpatch: Unavailable→Official Patch0.0 → 0.0
2026-07-21cve.orginitial, patch: Unavailable0.0

Affected Software
VendorProductVersion
wordpresswordpress0.6.2
wordpresswordpress0.6.2.1
wordpresswordpress0.7
wordpresswordpress0.71
wordpresswordpress1.2
wordpresswordpress1.2.1
wordpresswordpress1.2.2
wordpresswordpress1.5
wordpresswordpress1.5.1
wordpresswordpress1.5.1.2
wordpresswordpress1.5.1.3
wordpresswordpress1.5.2
wordpresswordpress2.0
wordpresswordpress2.0.1
Published: 2006-03-19