CVE-2007-3639

CVE-2007-3639 describes a vulnerability in WordPress versions prior to 2.2.2, allowing remote attackers to redirect users to arbitrary websites, potentially leading to information disclosure. This issue primarily stems from improper handling of the _wp_http_referer parameter in wp-pass.php. With a CVSS score of 4.0, this vulnerability has a network attack vector and high access complexity, indicating that an attacker would need specific conditions to successfully exploit it, but could achieve partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.