CVE-2007-1277

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 27.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-05 · updated 2026-06-16
Weakness: CWE-20

Description

WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to wp-includes/feed.php, and (2) an untrusted passthru call in the iz parameter to wp-includes/theme.php.

Affected products

WordPress: 2.1.1

References

http://ifsec.blogspot.com/2007/03/wordpress-code-compromised-to-enable.html
http://secunia.com/advisories/24374
http://wordpress.org/development/2007/03/upgrade-212/
http://www.kb.cert.org/vuls/id/214480
http://www.kb.cert.org/vuls/id/641456
http://www.securityfocus.com/archive/1/461794/100/0/threaded
http://www.securityfocus.com/bid/22797
http://www.vupen.com/english/advisories/2007/0812
https://exchange.xforce.ibmcloud.com/vulnerabilities/32804
https://exchange.xforce.ibmcloud.com/vulnerabilities/32807
http://ifsec.blogspot.com/2007/03/wordpress-code-compromised-to-enable.html
http://secunia.com/advisories/24374

Get alerted when CVE-2007-1277 or the next vulnerability affects your stack