CVE-2010-4257

Key facts

CVSS score

6.0 (v2.0)

Severity

MEDIUM

CVSS vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Weakness (CWE)

CWE-89

EPSS score

3.1% (88th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2010-4230)

Published

December 7, 2010

NVD last modified

June 16, 2026

Status

Modified

Affected products

• wordpress / wordpress

References

• http://blog.sjinks.pro/wordpress/858-information-disclosure-via-sql-injection-attack/(Broken Link)
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=605603(Issue Tracking, Mailing List, Third Party Advisory)
• http://codex.wordpress.org/Version_3.0.2(Vendor Advisory)
• http://core.trac.wordpress.org/changeset/16625(Vendor Advisory)
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052879.html(Third Party Advisory)
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052892.html(Third Party Advisory)
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052917.html(Third Party Advisory)
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052932.html(Third Party Advisory)
• http://secunia.com/advisories/42431(Third Party Advisory)
• http://secunia.com/advisories/42753(Third Party Advisory)
• http://secunia.com/advisories/42844(Third Party Advisory)
• http://secunia.com/advisories/42871(Third Party Advisory)
• http://wordpress.org/news/2010/11/wordpress-3-0-2/(Patch, Vendor Advisory)
• http://www.debian.org/security/2010/dsa-2138(Third Party Advisory)
• http://www.securityfocus.com/bid/45131(Third Party Advisory, VDB Entry)
• http://www.vupen.com/english/advisories/2010/3337(Third Party Advisory)
• http://www.vupen.com/english/advisories/2011/0042(Third Party Advisory)
• http://www.vupen.com/english/advisories/2011/0057(Third Party Advisory)
• http://www.xakep.ru/magazine/xa/124/052/1.asp(Not Applicable)
• https://bugzilla.redhat.com/show_bug.cgi?id=659265(Issue Tracking, Third Party Advisory)