CVE-2007-0540: WordPress

Medium severity, CVSS 5.0. EPSS: 7.6% chance of exploitation in the next 30 days.

WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data.

Affected products

• WordPress WordPress: up to and including 2.0

Published 2007-01-29. Last modified 2026-06-16.