Filter
AND
WordPress WordPressThe create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not …
First published (updated )
WordPress WordPresswp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPresswp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not chec…
3.5
First published (updated )
WordPress WordPresswp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limi…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPresswp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbac…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressxmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPresswp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites …
6.5
First published (updated )
WordPress WordPressThe (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPresswp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the P…
7.5
First published (updated )
WordPress WordPressThe XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, all…
6.4
First published (updated )
WordPress WordPressWordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.