OSVDB: Open Sourced Vulnerability Database

Creditee: José Orlicki

Known Contact Information:

None at this time

Known Affiliations:

Core Security Technologies (as of 2009-07-08)

Disclosed Vulnerabilities (6):

Disc. Date	OSVDB ID	CVEID	Title
2009-07-08	55713	2009-2335	WordPress Login Error Message Account Enumeration
2009-07-08	55714	2009-2336	WordPress Forgotten Mail Interface New Password Request User Enumeration
2009-07-08	55712	2009-2334	WordPress admin.php page Parameter Arbitrary Plugin Configuration Disclosure
2009-07-08	55715	2009-2334	WordPress Plugin Configuration Module Exclude Actions By Term Field XSS
2009-07-08	55716	2009-2431	WordPress HTML Comment Poster Account Name Disclosure
2009-07-08	55717	2009-2432	WordPress wp-settings.php Direct Request Path Disclosure

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.