AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-5293

MEDIUM · CVSS 5.8 EPSS 2.53%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-01-21 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.8. It affects WordPress. It may be remotely exploitable.

CVE
CVE-2010-5293
Severity
MEDIUM
CVSS
5.8
EPSS
2.53%
WordPress

Original NVD Description

wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a substring match.