CVE-2013-2202

Source
https://nvd.nist.gov/vuln/detail/CVE-2013-2202
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2013-2202.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2013-2202
Downstream
Related
Published
2013-07-08T20:55:01Z
Modified
2025-08-09T19:01:27Z
Summary
[none]
Details

WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References

Affected packages