WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source.
An official patch is available. Apply the patch as soon as possible.
Patch StatusOfficial Patch
Change Log
| Date | Source | Changes | Score |
|---|
| 2026-07-17 | PoC | E: U→P | 0.0 → 0.0 |
| 2026-07-15 | cve.org | initial | 0.0 |
Affected Software
| Vendor | Product | Version |
|---|
| wordpress | wordpress | 2.7.1 |
Published: 2009-07-10
