Filter
AND
WordPress WordPressObject injection via local phar file
9.8
First published (updated )
WordPress WordPressAuthenticated XSS via media attachment page in WordPress
6.8
First published (updated )
WordPress WordPressOpen redirect in wp_validate_redirect() in WordPress
5.7
First published (updated )
WordPress WordPressAuthenticated self-XSS via theme uploads in WordPress
3.5
First published (updated )
WordPress WordPressset-screen-option filter misuse by plugins leading to privilege escalation in WordPress
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressAuthenticated XSS through embed block in WordPress
5.4
First published (updated )
WordPress WordPressSpecially crafted filenames in WordPress leading to XSS
8.7
First published (updated )
WordPress WordPressCross-site scripting in stats method (object cache) in WordPress
6.1
First published (updated )
WordPress WordPressPassword reset links invalidation issue in WordPress
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Debian Debian LinuxIn in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, a…
First published (updated )
WordPress WordPressStored cross-site scripting (XSS) in WordPress block editor
5.8
First published (updated )
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
WordPress WordPressWordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by …
First published (updated )
WordPress WordPressThe wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.…
6.4
First published (updated )