CVE-2007-6013: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.

Affected products

• Fedoraproject Fedora: version 7 only; version 8 only
• WordPress WordPress: from 1.5, up to and including 2.3.1

Published 2007-11-19. Last modified 2026-06-16.