https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T11:43:22.934917+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2007-4894 fkie_cve-2007-4894 2026-10-01T11:43:22.940349+00:00

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the post_type parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters."

 https://vulnerability.circl.lu/vuln/ghsa-7jph-c3pf-xgjr GHSA-7jph-c3pf-xgjr 2026-10-01T11:43:22.940452+00:00

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the post_type parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters related to "early database escaping" and missing validation of "query string like parameters."

 https://vulnerability.circl.lu/vuln/gsd-2007-4894 gsd-2007-4894 2026-10-01T11:43:22.940491+00:00 gsd-2007-4894