Unrated severityNVD Advisory· Published Mar 2, 2007· Updated Jun 16, 2026

CVE-2007-1230

Description

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via (1) the Referer HTTP header or (2) the URI, a different vulnerability than CVE-2007-1049.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/WordPress2 versions
cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wordpress:wordpress:2.1:*:*:*:*:*:*:*
- (no CPE)range: <2.1.2-alpha
Package: https://wordpress.org/plugins/wordpress

Patches

Vulnerability mechanics

References

trac.wordpress.org/changeset/4951nvdPatch
trac.wordpress.org/changeset/4952nvdPatch
osvdb.org/34361nvd
secunia.com/advisories/24566nvd
www.gentoo.org/security/en/glsa/glsa-200703-23.xmlnvd
www.vupen.com/english/advisories/2007/0756nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000