76 results · Clear filters · Feed
-
Unscored —CVE-2012-0937 Public exploit
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MyS…
-
Unscored —CVE-2012-0782 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordP…
-
Unscored —
WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct reques…
-
Unscored —CVE-2009-3890 Public exploit
Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions.php in WordPress befo…
-
Unscored —
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cros…
-
Unscored —CVE-2009-2851 Public exploit
Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attacke…
-
Unscored —
wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the…
-
Unscored —CVE-2009-2334 Public exploit
wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access …
-
Unscored —
WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the …
-
Unscored —
wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests…
-
Unscored —CVE-2008-4769 Public exploit
Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and…
-
Unscored —CVE-2008-1930 Public exploit
The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXP…
-
Unscored —CVE-2008-0193 Public exploit
Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x throug…
-
Unscored —CVE-2008-0192 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2007-6318 Public exploit
SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute …
-
Unscored —CVE-2007-5710 Public exploit
Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inj…
-
Unscored —CVE-2007-5105 Public exploit
Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to injec…
-
Unscored —CVE-2007-3140 Public exploit
SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL c…
-
Unscored —CVE-2007-2821 Public exploit
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbit…
-
Unscored —
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact…
-
Unscored —CVE-2007-1897 Public exploit
SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticate…
-
Unscored —CVE-2007-1622 Public exploit
Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in t…
-
Unscored —CVE-2007-1244 Public exploit
Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attacker…
-
Unscored —CVE-2007-1049 Public exploit
Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/f…
-
Unscored —CVE-2007-0540 Public exploit
WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service c…
-
Unscored —
wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeri…
-
Unscored —
WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query…
-
Unscored —CVE-2006-6808 Public exploit
Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject…
-
Unscored —
Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allow…
-
Unscored —
Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-0733 Public exploit
Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2005-4600 Public exploit
Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to…
-
Unscored —
Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2005-2108 Public exploit
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitr…
-
Unscored —
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splittin…
-
Unscored —CVE-2004-1559 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scr…