CVE-2010-5293

wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match.

CVSS v2.0

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N

EPSS

2.53% chance of exploitation in the next 30 days, 84th percentile

Nuclei

medium

Published

2014-01-21

Updated

2024-09-16

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2010/CVE-2010-5293-wordpress-12…

References

• CVE Record
• NVD entry

Related

• CVE-2010-5289
• CVE-2010-5294
• CVE-2010-5287
• CVE-2010-5295
• CVE-2010-5286
• CVE-2010-5296