Attackers could use a weakness in the WordPress 1.5 and earlier software to gain access to the website and execute commands that could potentially damage the website. This weakness is found in the wp-trackback.php file and is activated when the tb_id parameter is used.