Description
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress.com Custom CSS Cross-Site Scripting (1.5)
Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.13)
WordPress Plugin Ad-Manager Open Redirect (1.1.2)
Oracle JRE CVE-2013-3829 Vulnerability (CVE-2013-3829)
Roundcube Deserialization of Untrusted Data Vulnerability (CVE-2026-35537)