Back

CVE-2004-1584

CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.

Published: Dec 31, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
wordpress wordpress 1.2

GitHub Security Advisory GHSA-f4rg-5qc9-c5v5

CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 11.23%

Top 4% most likely to be exploited

Threat Score 23.4 / 100

Data Sources

NVD EPSS GitHub