Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 2.0.6 vulnerabilities and exploits

(subscribe to this query)

4.3
CVSSv2
CVE-2012-1068
Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging....
Mg12 Wp-recentcomments 2.0.4Mg12 Wp-recentcomments 2.0.3Mg12 Wp-recentcomments 2.0.6Mg12 Wp-recentcomments 2.0.5Mg12 Wp-recentcomments 1.8.1Mg12 Wp-recentcomments 1.8Mg12 Wp-recentcomments 2.0.2Mg12 Wp-recentcomments 2.0.1Mg12 Wp-recentcommentsMg12 Wp-recentcomments 2.0Mg12 Wp-recentcomments 1.8.2
4.3
CVSSv2
CVE-2014-3841
Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are obtained from third party...
Tech-banker Contact Bank 2.0.16Tech-banker Contact Bank 2.0.14Tech-banker Contact Bank 2.0.7Tech-banker Contact BankTech-banker Contact Bank 2.0.18Tech-banker Contact Bank 2.0.4Tech-banker Contact Bank 2.0.3Tech-banker Contact Bank 2.0.2Tech-banker Contact Bank 2.0.1Tech-banker Contact Bank 2.0.12Tech-banker Contact Bank 2.0.11Tech-banker Contact Bank 2.0.10Tech-banker Contact Bank 2.0.9Tech-banker Contact Bank 2.0.17Tech-banker Contact Bank 2.0.15Tech-banker Contact Bank 2.0.13Tech-banker Contact Bank 2.0.8Tech-banker Contact Bank 2.0.6Tech-banker Contact Bank 2.0.5Tech-banker Contact Bank 2.0.0
6.8
CVSSv2
CVE-2018-21002
The js-support-ticket plugin before 2.0.6 for WordPress has CSRF....
4.3
CVSSv2
CVE-2016-10952
The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter....
4.3
CVSSv2
CVE-2019-14327
A CSRF vulnerability in Settings form in the Custom Simple Rss plugin 2.0.6 for WordPress allows attackers to change the plugin settings....
5
CVSSv2
CVE-2014-4942
The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function....
6.8
CVSSv2
CVE-2007-0106
Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly...
3.5
CVSSv2
CVE-2021-24266
The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method....
6.8
CVSSv2
CVE-2020-22275
Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable....
6.8
CVSSv2
CVE-2007-0107
WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using...
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-32471CVE-2021-31167CVE-2021-22204command injectionCVE-2021-31204cross-site scriptingCVE-2021-31912encryptionCVE-2021-28465
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook