Filters
Software
WordPress WordPressWordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for remote…
9.8
First published (updated )
WordPress WordPressObject injection via local phar file
9.8
First published (updated )
Wordpress RequestsInsecure Deserialization of untrusted data in rmccue/requests
9.8
First published (updated )
Fedoraproject FedoraWordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredI…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject Fedorawp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain privileges…
9.8
First published (updated )
Fedoraproject Fedorais_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines wheth…
9.8
First published (updated )
Canonical Ubuntu Linuxis_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file deletion b…
9.1
First published (updated )
Fedoraproject FedoraWordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.
9.8
First published (updated )
Elementor Elementor ProThe Dynamic OOO widget for the Elementor Pro plugin through 3.0.5 for WordPress allows remote authen…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Webdesi9 File ManagerWordPress File Manager Plugin Remote Code Execution Vulnerability
First published (updated )
WordPress WordPressIn WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection atta…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Connections Project ConnectionsUnspecified vulnerability in the Connections plugin before 0.7.1.6 for WordPress has unknown impact …
10
First published (updated )
Awpcp Another Wordpress Classifieds PluginUnspecified vulnerability in the Another WordPress Classifieds Plugin before 2.0 for WordPress has u…
10
First published (updated )
Zingiri Zingiri Web ShopMultiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have …
10
First published (updated )
Jquindlen WpstorecartUnrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for…
10
First published (updated )
Rbx Gallery Rbx GalleryUnrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress a…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressUnspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impac…
10
First published (updated )
WordPress WordPressThe file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on …
9.3
First published (updated )
WordPress WordPressUnspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and…
10
First published (updated )
WordPress WordPressUnspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressWordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-…
10
First published (updated )
WordPress WordPresswp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the applicatio…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
WordPress WordPressWordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which a…
9.8
First published (updated )
WordPress WordPressMultiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack…
10
First published (updated )