Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-7643-6738-v3g9
Vulnerability ID VCID-7643-6738-v3g9
Aliases CVE-2007-5710
Summary Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the posts_columns array parameter.
Status Published
Exploitability 2.0
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
Data source Exploit-DB
Date added Oct. 29, 2007
Description WordPress Core 2.3 - 'Edit-Post-Rows.php' Cross-Site Scripting
Ransomware campaign use Known
Source publication date Oct. 29, 2007
Exploit type webapps
Platform php
Source update date May 4, 2017
Source URL https://www.securityfocus.com/bid/26228/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.87245
EPSS Score 0.03339
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:30:22.730937+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0