UpHeron
All vulnerabilities

WordPress core

CVE-2008-0195

WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages.

Severity
Medium 5.0
Published
10 Jan 2008
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Every version up to 2.0.11

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2008-0195
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2008-0195