Filter
AND
AND
WordPressThe create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPressWordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to …
4.3
First published (updated )
WordPressWordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote authen…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
Drupal DrupalThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and …
First published (updated )
WordPressThe wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.…
6.4
First published (updated )
WordPressWordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPressWordPress before 3.4.1 does not properly restrict access to post contents such as private or draft p…
First published (updated )