From：vul.kr

It had been published that wordpress 2.8 All version are suffering from Xss,attackers can use this to do fishing,they make a wordpress login page as it is your own.If you don’t take care,your password will be sent to the attacker’s website.With your password,they can edit pages and upload webshell.It is harmful.

Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit

来源：Hack57

受影响系统：
WordPress 2.5
不受影响系统：
WordPress 2.5.1

来源：Hack57
受影响系统：
WordPress wpSS <= 0.6 v
不受影响系统：
WordPress wpSS 0.62

Release date: 2007-12-10
Last modified: 2007-12-12
Source: Abel Cheung
Affected version: WordPress <= 2.3.1

Wordpress <= 2.0.6 wp-trackback.php Remote SQL Injection

日前，国外安全研究人员斯蒂芬·J·莫道奇发现，流行的个人博客站点程序WordPress中存在一个安全漏洞，攻击者可利用该漏洞绕过某些安全限制。