CVE-2006-0733

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-02-16 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as (1) onfocus and (2) onblur in the "author's website" field. NOTE: followup comments to the researcher's web log suggest that this issue is only exploitable by the same user who injects the XSS, so this might not be a vulnerability

Affected products

WordPress: 2.0

References

http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.html
http://www.securityfocus.com/archive/1/425043/100/0/threaded
http://www.securityfocus.com/bid/16656
https://exchange.xforce.ibmcloud.com/vulnerabilities/24736
http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.html
http://www.securityfocus.com/archive/1/425043/100/0/threaded
http://www.securityfocus.com/bid/16656
https://exchange.xforce.ibmcloud.com/vulnerabilities/24736

Get alerted when CVE-2006-0733 or the next vulnerability affects your stack