wordpress

354 results · Feed

• Unscored —
  CVE-2007-0262

  WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data typ…

  wordpress Debian
  Jan 16, 2007
• Unscored —
  CVE-2007-0233 Public exploit EPSS 12%

  wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeri…

  wordpress Debian
  Jan 13, 2007
• Unscored —
  CVE-2007-0107 Public exploit EPSS 12%

  WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query…

  wordpress Debian
  Jan 9, 2007
• Unscored —
  CVE-2007-0109

  wp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or not, which allows rem…

  wordpress Debian
  Jan 9, 2007
• Unscored —
  CVE-2007-0106

  Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attacker…

  wordpress Debian
  Jan 9, 2007
• Unscored —
  CVE-2006-6808 Public exploit

  Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject…

  wordpress Debian
  Dec 28, 2006
• Medium 6.5
  CVE-2006-6017

  WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, whi…

  wordpress Debian
  Nov 21, 2006
• Medium 6.5
  CVE-2006-6016

  wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary…

  wordpress Debian
  Nov 21, 2006
• Unscored —
  CVE-2006-5705

  Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authent…

  wordpress Debian
  Nov 4, 2006
• Unscored —
  CVE-2006-4743

  WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for (1) 404.…

  wordpress Debian
  Sep 13, 2006
• Unscored —
  CVE-2006-4208 Public exploit EPSS 12%

  Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allow…

  wordpress Web / CMS Debian
  Aug 17, 2006
• Unscored —
  CVE-2006-4028

  Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. NOTE: due…

  wordpress Debian
  Aug 9, 2006
• Unscored —
  CVE-2006-3389

  index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via a…

  wordpress Debian
  Jul 6, 2006
• Unscored —
  CVE-2006-3390

  WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as …

  wordpress Debian
  Jul 6, 2006
• Unscored —
  CVE-2006-2702

  vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a…

  wordpress Debian
  May 31, 2006
• Unscored —
  CVE-2006-2667 Public exploit EPSS 15%

  Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary …

  wordpress Debian
  May 30, 2006
• Unscored —
  CVE-2006-1796

  Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress…

  wordpress Debian
  Apr 17, 2006
• Unscored —
  CVE-2006-1263

  Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to i…

  wordpress Debian
  Mar 19, 2006
• Unscored —
  CVE-2006-1012

  SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to exec…

  wordpress Debian
  Mar 6, 2006
• Unscored —
  CVE-2006-0985

  Multiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of WordPress 2.0.1 and earlier …

  wordpress Debian
  Mar 3, 2006
• Unscored —
  CVE-2006-0986

  WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default…

  wordpress Debian
  Mar 3, 2006
• Unscored —
  CVE-2006-0733 Public exploit

  Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or H…

  wordpress Debian
  Feb 16, 2006
• Unscored —
  CVE-2005-4600 Public exploit

  Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to…

  wordpress Debian
  Jan 1, 2006
• Unscored —
  CVE-2005-4463

  WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to (1) wp-includes/…

  wordpress Debian
  Dec 21, 2005
• Unscored —
  CVE-2005-2612 Public exploit EPSS 39%

  Direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP c…

  wordpress Debian
  Aug 17, 2005
• Unscored —
  CVE-2005-2107

  Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers…

  wordpress Debian
  Jul 1, 2005
• Unscored —
  CVE-2005-2108 Public exploit

  SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitr…

  wordpress Debian
  Jul 1, 2005
• Unscored —
  CVE-2005-2110

  WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via (1) a direct request to menu-…

  wordpress Debian
  Jul 1, 2005
• Unscored —
  CVE-2005-2109

  wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e…

  wordpress Debian
  Jul 1, 2005
• Unscored —
  CVE-2005-1810

  SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute ar…

  wordpress Debian
  Jun 1, 2005
• Medium 5.3
  CVE-2005-1688

  Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) …

  wordpress Debian
  May 25, 2005
• Unscored —
  CVE-2005-1687

  SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitra…

  wordpress Debian
  May 25, 2005
• Unscored —
  CVE-2004-1584 Public exploit EPSS 11%

  CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splittin…

  wordpress Debian
  Feb 20, 2005
• Unscored —
  CVE-2004-1559 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web scr…

  wordpress Debian
  Feb 20, 2005