VULNERABILITY INTELLIGENCE
CVE-2007-0540
CVSS score5 MEDIUM
EPSS probability7.59%
CISA KEVNot currently listed
Published2007-01-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data.