CVE-2009-2431
WordPress 2.7.1 places the username of a post’s author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source.
Date published : 2009-07-10
http://www.securityfocus.com/archive/1/504795/100/0/threaded