CVE-2005-1688: WordPress

Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.

Affected products

• WordPress WordPress: up to and including 1.5

Published 2005-05-20. Last modified 2026-06-16.