CVE-2007-3140: WordPress

Medium severity, CVSS 6.5. EPSS: 7.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL commands via a parameter value in an XML RPC wp.suggestCategories methodCall, a different vector than CVE-2007-1897.

Affected products

• WordPress WordPress: version 2.2 only

Published 2007-06-08. Last modified 2026-06-16.