Gentoo Linux Security Advisory GLSA 200507-02 – James Bercegay of the GulfTech Security Research Team discovered that WordPress insufficiently checks data passed to the XML-RPC server. He also discovered that WordPress has several cross-site scripting and full path disclosure vulnerabilities. Versions less than 1.5.1.3 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38490/glsa-200507-02.txt
Source: https://packetstormsecurity.com/files/38490/Gentoo-Linux-Security-Advisory-200507-2.html