CVE-2007-4154

Publication date 3 August 2007

Last updated 17 July 2025

Ubuntu priority

Description

SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the page_options parameter to (1) options-general.php, (2) options-writing.php, (3) options-reading.php, (4) options-discussion.php, (5) options-privacy.php, (6) options-permalink.php, (7) options-misc.php, and possibly other unspecified components.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
wordpress	9.10 karmic	Not affected
	9.04 jaunty	Not affected
	8.10 intrepid	Not affected
	8.04 LTS hardy	Not affected
	7.10 gutsy	Not affected
	7.04 feisty	Ignored end of life, was needed
	6.10 edgy	Ignored end of life, was needed
	6.06 LTS dapper	Ignored end of life

Notes

fujitsu

Also fixed in 2.2.2.

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
wordpress	Vendor: https://bugs.launchpad.net/ubuntu/+source/wordpress/+bug/227307

References

Other references

https://www.cve.org/CVERecord?id=CVE-2007-4154