Filter
AND
WordPressUnspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impac…
10
First published (updated )
WordPressWordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPressThe XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly ch…
6.5
First published (updated )
WordPressThe wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.…
6.4
First published (updated )
WordPresswp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbac…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPresswp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to by…
5.5
First published (updated )
WordPresswp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limi…
First published (updated )
WordPressPlupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other produ…
First published (updated )
WordPressWordPress before 3.4.1 does not properly restrict access to post contents such as private or draft p…
First published (updated )
WordPressWordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPresswp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPressWordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to …
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.