CVE-2005-2110

CVE-2005-2110 is an information disclosure vulnerability affecting WordPress versions 1.5.1.2 and earlier, and later also WordPress 2.0.1. Remote attackers can exploit this by directly requesting menu-header.php or by supplying a "1" value to the feed parameter in wp-atom.php, wp-rss.php, or wp-rss2.php, which causes the server to reveal the full path in an error message. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, potentially leading to sensitive information exposure. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.