GCVE-110-CERTCC-2007-641456

Advisory Published

Vulnetix · Advisory published March 2, 2007

WordPress fails to properly sanitize input to the iz parameter in wp-includes/theme.php, which could allow a remote, unauthenticated attacker to execute arbitrary commands.

Download JSON Open in Console

Risk Scores

certcc-cam

impact14population6exploitation0widely_known20score_current20.16ease_of_exploitation20

certcc-vrda

d1_impact3d1_population2d1_direct_report0

Aliases

CVE-2007-1277

References

WordPress fails to properly sanitize input passed to the iz parameter in wp-includes/theme.php

advisory

WordPress fails to properly sanitize input passed to the iz parameter in wp-includes/theme.php

url

WordPress fails to properly sanitize input passed to the iz parameter in wp-includes/theme.php

url

WordPress fails to properly sanitize input passed to the iz parameter in wp-includes/theme.php

url

WordPress fails to properly sanitize input passed to the iz parameter in wp-includes/theme.php

url

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON