Seven WordPress vulnerabilities which may lead to a successful blog compromise under appropriate circumstances:
Affected WordPress Version: 2.2.1 - the latest version.
- . Default Theme Kubrick: “Header Image and Color” section
- . SQL Injection Vulnerability
- . Options php Information Disclosure
- . Options php Persistant XSS Vulnerability
- . Edit comments php Database Error
- . Link import php XSS Vulnerability
- . Upload php XSS Vulnerability
Read complete article at Rootzilla.



