Filter
AND
WordPress WordPressObject injection via local phar file
9.8
First published (updated )
WordPress WordPressSpecially crafted filenames in WordPress leading to XSS
8.7
First published (updated )
WordPress WordPressPassword reset links invalidation issue in WordPress
8.1
First published (updated )
WordPress WordPressWordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow rem…
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressAuthenticated XSS via media attachment page in WordPress
6.8
First published (updated )
WordPress WordPressThe wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.…
6.4
First published (updated )
WordPress WordPressCross-site scripting in stats method (object cache) in WordPress
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressset-screen-option filter misuse by plugins leading to privilege escalation in WordPress
First published (updated )
WordPress WordPressOpen redirect in wp_validate_redirect() in WordPress
5.7
First published (updated )
WordPress WordPressAuthenticated XSS through embed block in WordPress
5.4
First published (updated )
WordPress WordPressImproper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthent…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
WordPress WordPresswp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPresswp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1…
4.3
First published (updated )
WordPress WordPressWordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by …
First published (updated )
WordPress WordPressAuthenticated self-XSS via theme uploads in WordPress
3.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.