CVE-2007-5229

MEDIUM 6.4 CVSS 2.0

Published: October 5, 2007
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-352
CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Description

Cross-site request forgery (CSRF) vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote attackers to change settings and hijack blog feeds via a request to wp-admin/options-general.php that submits parameter values to FeedBurner_FeedSmith_Plugin.php, as demonstrated by the (1) feedburner_url and (2) feedburner_comments_url parameters.

Affected products and versions

n/a n/a — Versions not specified

References

blogs.feedburner.com http://blogs.feedburner.com/feedburner/archives/2007/10/the_feedsmith_plugin_newly_for.php
blogsecurity.net http://blogsecurity.net/wordpress/feedburner-feed-hijacking/ Exploit
blogsecurity.net http://blogsecurity.net/wordpress/feedsmith-feedburner-vulnerability-fixed/
marc.info http://marc.info/?l=full-disclosure&m=119145344606493&w=2 Exploit
secunia.com http://secunia.com/advisories/27055 Patch, Vendor Advisory
www.securityfocus.com http://www.securityfocus.com/bid/25921
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/36940
www.exploit-db.com https://www.exploit-db.com/exploits/30637/
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References