Skip to content
OpenAdvisories

Category

Web / CMS

26,715 known vulnerabilities.

1,140 results · Clear filters · Feed

  • Unscored —
    CVE-2008-0490 Public exploit

    SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers t…

  • Unscored —
    CVE-2008-0491 Public exploit

    SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execut…

  • Unscored —
    CVE-2008-0388 Public exploit

    SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-0222 Public exploit

    Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows rem…

  • Unscored —
    CVE-2007-6369 Public exploit

    Multiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier plugin for WordPress allow…

  • Unscored —
    CVE-2007-5800 Public exploit EPSS 37%

    Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow…

  • Unscored —
    CVE-2007-5229 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the FeedBurner FeedSmith 2.2 plugin for WordPress allows remote atta…

  • Unscored —
    CVE-2007-4482 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to …

  • Unscored —
    CVE-2007-4186 Public exploit

    PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module …

  • Unscored —
    CVE-2007-4104 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote at…

  • Unscored —
    CVE-2007-3249 Public exploit

    Cross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman Subscriber (mod_letterman) befo…

  • Unscored —
    CVE-2007-2714 Public exploit EPSS 11%

    Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact…

  • Unscored —
    CVE-2007-2481 Public exploit EPSS 40%

    PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, w…

  • Unscored —
    CVE-2007-2485 Public exploit EPSS 55%

    PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allo…

  • Unscored —
    CVE-2007-2484 Public exploit EPSS 45%

    PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress,…

  • Unscored —
    CVE-2007-2482 Public exploit

    Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when re…

  • Unscored —
    CVE-2007-2483 Public exploit

    Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when …

  • Unscored —
    CVE-2007-2426 Public exploit EPSS 63%

    PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin f…

  • Unscored —
    CVE-2007-2319 Public exploit

    PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to …

  • Unscored —
    CVE-2006-4208 Public exploit EPSS 12%

    Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allow…