All vulnerabilities

WordPress core

CVE-2005-1810

SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.

Severity
High 7.5
Published
1 Jun 2005
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Version 1.5.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2005-1810
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2005-1810