CVE-2007-0109

CVE-2007-0109 describes an information disclosure vulnerability in WordPress 2.0.5 and earlier, specifically within the wp-login.php script. This flaw allows remote attackers to differentiate between existing and non-existent usernames based on distinct error messages, thereby facilitating brute-force attacks. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having a low attack complexity, potentially leading to sensitive information disclosure (C:P). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.