CVE-2006-0986

WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 default-filters.php, 2 template-loader.php, 3 rss-functions.php, 4 locale.php, 5 wp-db.php, and 6 kses.php in the wp-includes/ directory; and 7 edit-form-advanced.php, 8...

CVE-2006-0986

WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 default-filters.php, 2 template-loader.php, 3 rss-functions.php, 4 locale.php, 5 wp-db.php, and 6 kses.php in the wp-includes/ directory; and 7 edit-form-advanced.php, 8...

CVE-2006-0986

Summary of findings (CVE-2006-0986 / CVE-2006-4743): WordPress versions up to 2.0.1 and the range 2.0.2–2.0.5 expose sensitive information via direct requests to a set of PHP files in wp-includes/ and wp-admin/ (e.g., default-filters.php, template-loader.php, rss-functions.php, locale.php, wp-db....