WordPress core
CVE-2008-6767
wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outage), via a direct request.
- Severity
- High 10.0
- Published
- 28 Apr 2009
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 17 Oct 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
WordPressWordPress core · cpe:a:wordpress:wordpress |
|