CVE-2005-2109

wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable…

published July 1, 2005

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02578 · 85.0th percentile
Published
2005-07-01T04:00Z
EPSS history
Timeline
  • 01 JUL 04:00Z
    wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable…
    cvelistv5