CVE-2009-2852

WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via the…

published August 18, 2009

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via the test_filter[wp_head] array parameter to test/index.php, which is used in a call to the call_user_func_array function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04805 · 91.9th percentile
Published
2009-08-18T20:41Z
EPSS history
Timeline
  • 18 AUG 20:41Z
    WP-Syntax plugin 0.9.1 and earlier for Wordpress, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via the…
    cvelistv5