Lucene search
K

CVE-2009-2334

🗓️ 10 Jul 2009 20:25:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 110 Views🌐 WEB

WordPress and WordPress MU before 2.8.1 allows remote attackers to obtain sensitive information or modify configuration files

Related
Detection
Refs
Paths
NVD
Node
wordpresswordpressRange2.7.1
OROR
wordpresswordpressMatch0.6.2beta_2
OR
wordpresswordpressMatch0.6.2.1
OR
wordpresswordpressMatch0.6.2.1beta_2
OROROR
wordpresswordpressMatch0.71-gold
OROR
wordpresswordpressMatch0.72beta1
OR
wordpresswordpressMatch0.72beta2
OR
wordpresswordpressMatch0.72rc1
OROROROROROROR
wordpresswordpressMatch1.0-platinum
OROR
wordpresswordpressMatch1.0.1-miles
OROR
wordpresswordpressMatch1.0.2-blakey
OROR
wordpresswordpressMatch1.2beta
OR
wordpresswordpressMatch1.2-delta
OR
wordpresswordpressMatch1.2-mingus
OROROROROROR
wordpresswordpressMatch1.5-strayhorn
OROR
wordpresswordpressMatch1.5.1.1
OR
wordpresswordpressMatch1.5.1.2
OR
wordpresswordpressMatch1.5.1.3
OROROROROROROROROROROROROROR
wordpresswordpressMatch2.0.10_rc1
OR
wordpresswordpressMatch2.0.10_rc2
OROROR
wordpresswordpressMatch2.1alpha_3
OROROROR
wordpresswordpressMatch2.1.3_rc1
OR
wordpresswordpressMatch2.1.3_rc2
OROROROROROR
wordpresswordpressMatch2.2_revision5002
OR
wordpresswordpressMatch2.2_revision5003
OROR
wordpresswordpressMatch2.3beta3
OROROR
wordpresswordpressMatch2.3.1rc1
OROROROROROROROROROROROROROROROROROROROROROROROROROROROROR
ParameterPositionPathDescriptionCWE
pagequery paramwp-admin/admin.php?page=/collapsing-archives/options.txtPrivilege unchecked exposure of plugin configuration via admin.php page parameter (local file include/info disclosure).CWE-287
pagequery paramwp-admin/admin.php?page=akismet/readme.txtPrivilege unchecked access to plugin readme via admin.php page parameter leading to information disclosure.CWE-287
pagequery paramwp-admin/admin.php?page=related-ways-to-take-action/options.phpPrivilege unchecked access to a plugin options file through admin.php page parameter enabling information disclosure/injection risk.CWE-287
pagequery paramwp-admin/admin.php?page=wp-security-scan/securityscan.phpPrivilege unchecked access to WP Security Scanner plugin dashboard/internals via admin.php?page, enabling information exposure.CWE-287
pagequery paramwp-admin/index.php?page=wp-ids/ids-admin.phpPrivilege unchecked access to WP-IDS plugin configuration through index.php?page, allowing reconfiguration by non-admins.CWE-287

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 23:09Current
6.1Medium risk
Vulners AI Score6.1
CVSS 24.9
EPSS0.06259
110