VDB
DEBIAN-CVE-2013-2202
DEBIAN-CVE-2013-2202
PUBLISHED
CVSS 8.699999809265137 HIGH
WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | wordpress | 0, 0, 0 |
| Debian:14 | wordpress | 0 |
| Debian:13 | wordpress | 0, 0, 0 |
| Debian:12 | wordpress | 0, 0, 0 |
Timeline
- Jul 8, 2013 CVE Published
- May 7, 2026 CVE Updated