Filter
AND
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
WordPress WordPressWordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressThe wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.…
6.4
First published (updated )
WordPress WordPresswp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict…
First published (updated )
WordPress WordPresswp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive info…
6.4
First published (updated )
WordPress WordPresswp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability requ…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressThe create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not …
First published (updated )
WordPress WordPresswp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not chec…
3.5
First published (updated )
WordPress WordPressWordPress before 3.4.1 does not properly restrict access to post contents such as private or draft p…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressUnspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impac…
10
First published (updated )
WordPress WordPressPlupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other produ…
First published (updated )
WordPress WordPresswp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to by…
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPresswp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limi…
First published (updated )