Random

**Name of the Vulnerable Software and Affected Versions** WordPress versions prior to 2.0.5 **Description** The issue allows remote authenticated users to read the metadata of an arbitrary user via a modified `user id` parameter in the 'wp-admin/user-edit.php' page. **Recommendations** For versions prior to 2.0.5, update to version 2.0.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WordPress versions prior to 2.0.5 **Description** The issue allows remote authenticated users to cause a denial of service, resulting in an application crash. This occurs when a string representation of a serialized object is not properly stored in a profile. The object can be either malformed or large, triggering automatic unserialization for display, which leads to the denial of service. **Recommendations** For versions prior to 2.0.5, update to version 2.0.5 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 2.0.5 Description: The issue allows remote authenticated users to read or overwrite arbitrary files via directory traversal sequences. This is achieved by manipulating the `backup` and `fragment` parameters in a GET request to the API endpoint. Recommendations: For versions prior to 2.0.5, update to version 2.0.5 or later to resolve the issue.