Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-5qfx-f184-2fdk
Vulnerability ID VCID-5qfx-f184-2fdk
Aliases CVE-2007-6318
Summary wordpress: SQL injection when certain DB charsets are used
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.03532 https://api.first.org/data/v1/epss?cve=CVE-2007-6318
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6318.json
https://api.first.org/data/v1/epss?cve=CVE-2007-6318
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6318
421141 https://bugzilla.redhat.com/show_bug.cgi?id=421141
459305 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=459305
OSVDB-39552;CVE-2007-6318 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/4721.txt
OSVDB-39552;CVE-2007-6318 Exploit http://www.abelcheung.org/advisory/20071210-wordpress-charset.txt
Data source Exploit-DB
Date added Dec. 10, 2007
Description WordPress Core 2.3.1 - Charset SQL Injection
Ransomware campaign use Known
Source publication date Dec. 11, 2007
Exploit type webapps
Platform php
Source update date Oct. 20, 2016
Source URL http://www.abelcheung.org/advisory/20071210-wordpress-charset.txt
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.87861
EPSS Score 0.03532
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T10:17:53.331025+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-6318.json 38.6.0