CVE-2009-2431
Publication date 10 July 2009
Last updated 24 July 2024
Ubuntu priority
Description
WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source.