wordpress

412 tracked vulnerabilities.

CVE-2008-0192
WordPress < 2.0.9 - Cross-Site Scripting via popuptitle Parameter
Jan 10, 2008
EPSS 0.02
CVE-2008-0193
WordPress < 2.0.11 - Cross-Site Scripting via Backup Parameter
Jan 10, 2008
EPSS 0.02
CVE-2008-0194
WordPress < 2.0.3 - Path Traversal and Arbitrary File Read/Delete via Backup Parameter
Jan 10, 2008
EPSS 0.01
CVE-2008-0195
WordPress < 2.0.11 - Unauthenticated Sensitive Information Exposure via Empty Page Parameter
Jan 10, 2008
EPSS 0.02
CVE-2008-0196
WordPress < 2.0.11 - Path Traversal and Arbitrary File Write via Page and Import Parameters
Jan 10, 2008
EPSS 0.00
CVE-2008-0197
WP-ContactForm < 1.5_alpha - Cross-Site Scripting via Multiple Parameters
Jan 10, 2008
EPSS 0.00
CVE-2008-0203
Cryptographp < 1.2 - Stored Cross-Site Scripting via Multiple Parameters
Jan 10, 2008
EPSS 0.00
CVE-2008-0204
Math Comment Spam Protection Plugin < 2.1 - Cross-Site Scripting via Parameters
Jan 10, 2008
EPSS 0.00
CVE-2008-0205
Math Comment Spam Protection Plugin < 2.1 - Cross-Site Request Forgery
Jan 10, 2008
EPSS 0.00
CVE-2008-0206
WordPress Captcha Plugin < 2.5d - Cross-Site Scripting via captcha_ttffolder Parameter
Jan 10, 2008
EPSS 0.00
CVE-2007-6369
PictPress < 0.91 - Path Traversal via Size or Path Parameter
Dec 15, 2007
EPSS 0.03
CVE-2007-6318
WordPress <= 2.3.1 - SQL Injection via s Parameter
Dec 12, 2007
EPSS 0.04
CVE-2007-6013 CRITICAL
WordPress 1.5-2.3.1 - Authentication Bypass via MD5 Hash Reuse
Nov 19, 2007
CVSS 9.8
EPSS 0.02
CVE-2007-5710
WordPress 2.3 - Cross-Site Scripting via posts_columns Array Parameter
Oct 30, 2007
EPSS 0.03
CVE-2007-5105
WordPress 2.0-2.0.1 - Cross-Site Scripting via user_email Parameter
Sep 26, 2007
EPSS 0.02
CVE-2007-5106
WordPress 2.0 - Cross-Site Scripting via wp-register.php user_login Parameter
Sep 26, 2007
EPSS 0.00
CVE-2007-4893
WordPress < 2.2.3 and WordPress MU < 1.2.5a - Cross-Site Scripting via Unfiltered HTML Privilege
Sep 14, 2007
EPSS 0.02
CVE-2007-4894
WordPress < 2.2.3 and WordPress MU < 1.2.5a - SQL Injection via XMLRPC Pingback Post Type Parameter
Sep 14, 2007
EPSS 0.04
CVE-2007-4544
WordPress MU < 1.0 - Cross-Site Scripting via Weblog ID Parameter
Aug 27, 2007
EPSS 0.00
CVE-2007-4480
Sirius 1.0 - Cross-Site Scripting via PATH_INFO
Aug 22, 2007
EPSS 0.00
CVE-2007-4481
Blix 0.9.1 - Cross-Site Scripting via PATH_INFO
Aug 22, 2007
EPSS 0.00
CVE-2007-4482
WordPress Pool 1.0.7 - Cross-Site Scripting via PATH_INFO
Aug 22, 2007
EPSS 0.01
CVE-2007-4483
WordPress Classic 1.5 - Cross-Site Scripting via PATH_INFO
Aug 22, 2007
EPSS 0.01
CVE-2007-4166
Unnamed theme <1.217 & SE <1.02 - XSS
Aug 07, 2007
EPSS 0.01
CVE-2007-4153
WordPress 2.2.1 - Authenticated Stored Cross-Site Scripting via Admin Panel Options Database Table or OPML URL Import
Aug 03, 2007
EPSS 0.00
Products
wordpress 353 wordpress_mu 10 WordPress 3 sniplets_plugin 3 blix 2 math_comment_spam_protection_plugin 2 pay-with-tweet 2 wassup_plugin 2 Buddypress 1 Social-Share-Buttons 1 adserve 1 alert_before_you_post 1 blixed 1 blixkrieg 1 blogger_importer 1 captcha 1 cryptographp 1 dean_logan_wp-people_plugin 1 debug_bar 1 download_monitor_plugin 1 fcchat_widget 1 filemanager 1 gutenberg 1 health_check_\&_troubleshooting 1 lanoba_social_plugin 1 page_flip_image_gallery_plugin 1 performance_lab 1 permalinks_migration_plugin 1 peter\'s_math_anti-spam_for_wordpress 1 photo_album_plugin 1
Quick Filters
Critical CVEs With Exploits In CISA KEV