CVE-2013-0235

Published: Jul 8, 2013Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, related to a Server-Side Request Forgery (SSRF) issue.

Affected (76)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

76 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Up to 3.5.0
Wordpress Wordpress	Version 0.71
Wordpress Wordpress	Version 1.0.1
Wordpress Wordpress	Version 1.0.2
Wordpress Wordpress	Version 1.0
Wordpress Wordpress	Version 1.1.1
Wordpress Wordpress	Version 1.2.1
Wordpress Wordpress	Version 1.2.2
Wordpress Wordpress	Version 1.2.3
Wordpress Wordpress	Version 1.2.4
Wordpress Wordpress	Version 1.2.5
Wordpress Wordpress	Version 1.2.5 a
Wordpress Wordpress	Version 1.2
Wordpress Wordpress	Version 1.3.2
Wordpress Wordpress	Version 1.3.3
Wordpress Wordpress	Version 1.3
Wordpress Wordpress	Version 1.5.1.1
Wordpress Wordpress	Version 1.5.1.2
Wordpress Wordpress	Version 1.5.1.3
Wordpress Wordpress	Version 1.5.1
Wordpress Wordpress	Version 1.5.2
Wordpress Wordpress	Version 1.5
Wordpress Wordpress	Version 1.6.2
Wordpress Wordpress	Version 2.0.10
Wordpress Wordpress	Version 2.0.11
Wordpress Wordpress	Version 2.0.1
Wordpress Wordpress	Version 2.0.2
Wordpress Wordpress	Version 2.0.4
Wordpress Wordpress	Version 2.0.5
Wordpress Wordpress	Version 2.0.6
Wordpress Wordpress	Version 2.0.7
Wordpress Wordpress	Version 2.0.8
Wordpress Wordpress	Version 2.0.9
Wordpress Wordpress	Version 2.0
Wordpress Wordpress	Version 2.1.1
Wordpress Wordpress	Version 2.1.2
Wordpress Wordpress	Version 2.1.3
Wordpress Wordpress	Version 2.1
Wordpress Wordpress	Version 2.2.1
Wordpress Wordpress	Version 2.2.2
Wordpress Wordpress	Version 2.2.3
Wordpress Wordpress	Version 2.2
Wordpress Wordpress	Version 2.3.1
Wordpress Wordpress	Version 2.3.2
Wordpress Wordpress	Version 2.3.3
Wordpress Wordpress	Version 2.3
Wordpress Wordpress	Version 2.5.1
Wordpress Wordpress	Version 2.5
Wordpress Wordpress	Version 2.6.1
Wordpress Wordpress	Version 2.6.2
Wordpress Wordpress	Version 2.6.3
Wordpress Wordpress	Version 2.6.5
Wordpress Wordpress	Version 2.6
Wordpress Wordpress	Version 2.7.1
Wordpress Wordpress	Version 2.7
Wordpress Wordpress	Version 2.8.1
Wordpress Wordpress	Version 2.8.2
Wordpress Wordpress	Version 2.8.3
Wordpress Wordpress	Version 2.8.4
Wordpress Wordpress	Version 2.8.4 a
Wordpress Wordpress	Version 2.8.5.1
Wordpress Wordpress	Version 2.8.5.2
Wordpress Wordpress	Version 2.8.5
Wordpress Wordpress	Version 2.8.6
Wordpress Wordpress	Version 2.8
Wordpress Wordpress	Version 2.9.1.1
Wordpress Wordpress	Version 2.9.1
Wordpress Wordpress	Version 2.9.2
Wordpress Wordpress	Version 2.9
Wordpress Wordpress	Version 3.3.1
Wordpress Wordpress	Version 3.3.2
Wordpress Wordpress	Version 3.3.3
Wordpress Wordpress	Version 3.3
Wordpress Wordpress	Version 3.4.0
Wordpress Wordpress	Version 3.4.1
Wordpress Wordpress	Version 3.4.2