ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score
← Back to results

CVE-2008-3747

The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie.
An official patch is available. Apply the patch as soon as possible.
-
CVSS
0.0
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
Patch StatusOfficial Patch

Change Log
DateSourceChangesScore
2026-07-17PoCE: U→P0.0 → 0.0
2026-07-15cve.orginitial0.0
References: CVE.org · NVD · PoC

Affected Software
VendorProductVersion
wordpresswordpress0.6.2
wordpresswordpress0.6.2.1
wordpresswordpress0.7
wordpresswordpress0.71
wordpresswordpress0.711
wordpresswordpress0.72
wordpresswordpress1.0
wordpresswordpress1.0.1
wordpresswordpress1.2
wordpresswordpress1.2.1
wordpresswordpress1.2.2
wordpresswordpress1.5
wordpresswordpress1.5.1.3
wordpresswordpress1.5.2
wordpresswordpress2.0
wordpresswordpress2.0.1
wordpresswordpress2.0.10
wordpresswordpress2.0.11
wordpresswordpress2.0.2
wordpresswordpress2.0.4
wordpresswordpress2.0.5
wordpresswordpress2.0.6
wordpresswordpress2.0.7
wordpresswordpress2.0.9
wordpresswordpress2.1
wordpresswordpress2.1.1
wordpresswordpress2.1.2
wordpresswordpress2.1.3
wordpresswordpress2.2
wordpresswordpress2.2.1
wordpresswordpress2.2.2
wordpresswordpress2.2.3
wordpresswordpress2.3
wordpresswordpress2.3.1
wordpresswordpress2.3.2
wordpresswordpress2.5
wordpresswordpress2.5.1
wordpresswordpress2.6
Published: 2008-08-27