CVE-2008-4769

Published: Oct 28, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from third party information.

Affected (68)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

68 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Up to 2.3.3
Wordpress Wordpress	Version 0.6.2.1
Wordpress Wordpress	Version 0.6.2.1 beta_2
Wordpress Wordpress	Version 0.6.2
Wordpress Wordpress	Version 0.6.2 beta_2
Wordpress Wordpress	Version 0.71-gold
Wordpress Wordpress	Version 0.711
Wordpress Wordpress	Version 0.71
Wordpress Wordpress	Version 0.72
Wordpress Wordpress	Version 0.72 beta1
Wordpress Wordpress	Version 0.72 beta2
Wordpress Wordpress	Version 0.72 rc1
Wordpress Wordpress	Version 0.7
Wordpress Wordpress	Version 1.0-platinum
Wordpress Wordpress	Version 1.0.1-miles
Wordpress Wordpress	Version 1.0.1
Wordpress Wordpress	Version 1.0.2-blakey
Wordpress Wordpress	Version 1.0.2
Wordpress Wordpress	Version 1.0
Wordpress Wordpress	Version 1.2-delta
Wordpress Wordpress	Version 1.2-mingus
Wordpress Wordpress	Version 1.2.1
Wordpress Wordpress	Version 1.2.2
Wordpress Wordpress	Version 1.2
Wordpress Wordpress	Version 1.2 beta
Wordpress Wordpress	Version 1.3.1
Wordpress Wordpress	Version 1.4
Wordpress Wordpress	Version 1.5-strayhorn
Wordpress Wordpress	Version 1.5.1.1
Wordpress Wordpress	Version 1.5.1.2
Wordpress Wordpress	Version 1.5.1.3
Wordpress Wordpress	Version 1.5.1
Wordpress Wordpress	Version 1.5.2
Wordpress Wordpress	Version 1.5
Wordpress Wordpress	Version 1.6
Wordpress Wordpress	Version 2.0.10
Wordpress Wordpress	Version 2.0.10_rc1
Wordpress Wordpress	Version 2.0.10_rc2
Wordpress Wordpress	Version 2.0.11
Wordpress Wordpress	Version 2.0.1
Wordpress Wordpress	Version 2.0.2
Wordpress Wordpress	Version 2.0.3
Wordpress Wordpress	Version 2.0.4
Wordpress Wordpress	Version 2.0.5
Wordpress Wordpress	Version 2.0.6
Wordpress Wordpress	Version 2.0.7
Wordpress Wordpress	Version 2.0.8
Wordpress Wordpress	Version 2.0.9
Wordpress Wordpress	Version 2.0
Wordpress Wordpress	Version 2.1.1
Wordpress Wordpress	Version 2.1.2
Wordpress Wordpress	Version 2.1.3
Wordpress Wordpress	Version 2.1.3_rc1
Wordpress Wordpress	Version 2.1.3_rc2
Wordpress Wordpress	Version 2.1
Wordpress Wordpress	Version 2.1 alpha_3
Wordpress Wordpress	Version 2.2.0
Wordpress Wordpress	Version 2.2.1
Wordpress Wordpress	Version 2.2.2
Wordpress Wordpress	Version 2.2.3
Wordpress Wordpress	Version 2.2
Wordpress Wordpress	Version 2.2_revision5002
Wordpress Wordpress	Version 2.2_revision5003
Wordpress Wordpress	Version 2.3.1
Wordpress Wordpress	Version 2.3.1 rc1
Wordpress Wordpress	Version 2.3.2
Wordpress Wordpress	Version 2.3
Wordpress Wordpress	Version 2.5