Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-5pv4-ff9z-r3hp
Vulnerability ID VCID-5pv4-ff9z-r3hp
Aliases CVE-2006-6808
Summary WordPress is vulnerable to SQL injection, information disclosure, and cross-site scripting attacks.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
epss 0.03483 https://api.first.org/data/v1/epss?cve=CVE-2006-6808
cvssv2 6.8 https://nvd.nist.gov/vuln/detail/CVE-2006-6808
Reference id Reference type URL
http://marc.info/?l=full-disclosure&m=116722128631087&w=2
http://michaeldaw.org/
https://api.first.org/data/v1/epss?cve=CVE-2006-6808
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6808
http://secunia.com/advisories/23587
http://secunia.com/advisories/23741
http://security.gentoo.org/glsa/glsa-200701-10.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/31133
http://trac.wordpress.org/changeset/4665
http://www.securityfocus.com/bid/21782
http://www.vupen.com/english/advisories/2006/5191
405299 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405299
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:0.6.2.1:beta_2:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:0.6.2:beta_2:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:0.7:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:0.71:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:1.5:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:2.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*
CVE-2006-6808 https://nvd.nist.gov/vuln/detail/CVE-2006-6808
CVE-2006-6808;OSVDB-31578 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/29356.txt
CVE-2006-6808;OSVDB-31578 Exploit https://www.securityfocus.com/bid/21782/info
GLSA-200701-10 https://security.gentoo.org/glsa/200701-10
Data source Exploit-DB
Date added Dec. 27, 2006
Description WordPress Core 1.x/2.0.x - 'template.php' HTML Injection
Ransomware campaign use Known
Source publication date Dec. 27, 2006
Exploit type webapps
Platform php
Source update date Nov. 1, 2013
Source URL https://www.securityfocus.com/bid/21782/info
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2006-6808
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.87519
EPSS Score 0.03483
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:14:51.677935+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200701-10 38.0.0