Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 3.0.1 vulnerabilities and exploits

(subscribe to this query)

4.3
CVSSv2
CVE-2013-4626
Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php....
Marketpress Backwpup Plugin 3.0.7Marketpress Backwpup Plugin 3.0.6Marketpress Backwpup Plugin 3.0.5Marketpress Backwpup Plugin 3.0.4Marketpress Backwpup Plugin 3.0Marketpress Backwpup PluginMarketpress Backwpup Plugin 3.0.10Marketpress Backwpup Plugin 3.0.8Marketpress Backwpup Plugin 3.0.3Marketpress Backwpup Plugin 3.0.1Marketpress Backwpup Plugin 3.0.11Marketpress Backwpup Plugin 3.0.9Marketpress Backwpup Plugin 3.0.2
4.3
CVSSv2
CVE-2012-4283
Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter....
Netweblogic Login With Ajax 3.0.1Netweblogic Login With Ajax 2.21Netweblogic Login With Ajax 2.1.1Netweblogic Login With AjaxNetweblogic Login With Ajax 3.0.3Netweblogic Login With Ajax 3.0.2Netweblogic Login With Ajax 2.2Netweblogic Login With Ajax 2.1.5Netweblogic Login With Ajax 2.1.4Netweblogic Login With Ajax 2.1.3Netweblogic Login With Ajax 2.1.2Netweblogic Login With Ajax 3.0Netweblogic Login With Ajax 3.0bNetweblogic Login With Ajax 2.1
4.3
CVSSv2
CVE-2012-2759
Cross-site scripting (XSS) vulnerability in login-with-ajax.php in the Login With Ajax (aka login-with-ajax) plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php....
Netweblogic Login With Ajax 2.1.5Netweblogic Login With Ajax 2.2Netweblogic Login With Ajax 2.1.3Netweblogic Login With Ajax 2.1.4Netweblogic Login With Ajax 3.0.2Netweblogic Login With Ajax 3.0.3Netweblogic Login With AjaxNetweblogic Login With Ajax 2.1.1Netweblogic Login With Ajax 2.1.2Netweblogic Login With Ajax 3.0Netweblogic Login With Ajax 3.0.1Netweblogic Login With Ajax 2.1Netweblogic Login With Ajax 2.21Netweblogic Login With Ajax 3.0b
6.8
CVSSv2
CVE-2013-2707
Cross-site request forgery (CSRF) vulnerability in the Login With Ajax plugin before 3.1 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings....
Netweblogic Login With Ajax 2.2Netweblogic Login With Ajax 2.1.5Netweblogic Login With Ajax 2.1.4Netweblogic Login With Ajax 2.1.3Netweblogic Login With Ajax 3.0Netweblogic Login With Ajax 3.0.1Netweblogic Login With Ajax 3.0.2Netweblogic Login With Ajax 3.0.3Netweblogic Login With Ajax 3.0.4.1Netweblogic Login With Ajax 2.1.1Netweblogic Login With Ajax 2.1Netweblogic Login With Ajax 3.0b3Netweblogic Login With Ajax 3.0.4Netweblogic Login With Ajax 3.1Netweblogic Login With Ajax 2.21Netweblogic Login With Ajax 2.1.2Netweblogic Login With Ajax 3.0b
5
CVSSv2
CVE-2010-4403
The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message....
Devbits Register-plus 3.4Devbits Register-plus 3.3Devbits Register-plus 2.7Devbits Register-plus 2.6Devbits Register-plus 1.2Devbits Register-plus 1.1Devbits Register-plus 3.5Devbits Register-plus 3.4.1Devbits Register-plus 3.0Devbits Register-plus 2.9Devbits Register-plus 2.8Devbits Register-plus 2.1Devbits Register-plus 2.0Devbits Register-plus 3.2Devbits Register-plus 3.1Devbits Register-plus 2.5Devbits Register-plus 2.4Devbits Register-plusDevbits Register-plus 3.0.2Devbits Register-plus 3.0.1Devbits Register-plus 2.3Devbits Register-plus 2.2
10
CVSSv2
CVE-2014-7297
Unspecified vulnerability in the folder framework in the Enfold theme before 3.0.1 for WordPress has unknown impact and attack vectors....
4.3
CVSSv2
CVE-2010-4402
Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) firstname, (2) lastname, (3) website, (4) aim, (5) yahoo, (6) jabber, (7)...
Devbits Register-plus 3.4.1Devbits Register-plus 3.4Devbits Register-plus 2.8Devbits Register-plus 2.7Devbits Register-plus 2.0Devbits Register-plus 1.2Devbits Register-plusDevbits Register-plus 3.5Devbits Register-plus 3.0.1Devbits Register-plus 3.0Devbits Register-plus 2.9Devbits Register-plus 2.2Devbits Register-plus 2.1Devbits Register-plus 3.3Devbits Register-plus 3.2Devbits Register-plus 2.6Devbits Register-plus 2.5Devbits Register-plus 1.1Devbits Register-plus 3.1Devbits Register-plus 3.0.2Devbits Register-plus 2.4Devbits Register-plus 2.3
4.3
CVSSv2
CVE-2013-3526
Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the aoid parameter....
Wptrafficanalyzer Trafficanalyzer 3.3.2Wptrafficanalyzer Trafficanalyzer 3.0.1Wptrafficanalyzer Trafficanalyzer 3.0.0Wptrafficanalyzer Trafficanalyzer 2.7.0Wptrafficanalyzer Trafficanalyzer 2.6.0Wptrafficanalyzer Trafficanalyzer 2.2.1Wptrafficanalyzer Trafficanalyzer 2.2.0Wptrafficanalyzer Trafficanalyzer 1.5.0Wptrafficanalyzer Trafficanalyzer 1.4.0Wptrafficanalyzer Trafficanalyzer 1.0.0Wptrafficanalyzer Trafficanalyzer 3.2.1Wptrafficanalyzer Trafficanalyzer 3.2.0Wptrafficanalyzer Trafficanalyzer 3.1.0Wptrafficanalyzer Trafficanalyzer 2.8.2Wptrafficanalyzer Trafficanalyzer 2.8.1Wptrafficanalyzer Trafficanalyzer 2.5.0Wptrafficanalyzer Trafficanalyzer 2.4.1Wptrafficanalyzer Trafficanalyzer 1.8.0Wptrafficanalyzer Trafficanalyzer 1.7.0Wptrafficanalyzer Trafficanalyzer 1.1.3Wptrafficanalyzer Trafficanalyzer 1.1.2Wptrafficanalyzer Trafficanalyzer 3.0.3Wptrafficanalyzer Trafficanalyzer 3.0.2Wptrafficanalyzer Trafficanalyzer 2.8.0Wptrafficanalyzer Trafficanalyzer 2.7.1Wptrafficanalyzer Trafficanalyzer 2.4.0Wptrafficanalyzer Trafficanalyzer 2.3.0Wptrafficanalyzer Trafficanalyzer 1.6.1Wptrafficanalyzer Trafficanalyzer 1.6.0Wptrafficanalyzer Trafficanalyzer 1.1.1Wptrafficanalyzer Trafficanalyzer 1.1.0Wptrafficanalyzer Trafficanalyzer 3.3.1Wptrafficanalyzer Trafficanalyzer 3.3.0Wptrafficanalyzer Trafficanalyzer 2.9.1Wptrafficanalyzer Trafficanalyzer 2.9.0Wptrafficanalyzer Trafficanalyzer 2.5.2Wptrafficanalyzer Trafficanalyzer 2.5.1Wptrafficanalyzer Trafficanalyzer 2.1.0Wptrafficanalyzer Trafficanalyzer 2.0.0Wptrafficanalyzer Trafficanalyzer 1.9.0Wptrafficanalyzer Trafficanalyzer 1.3.0Wptrafficanalyzer Trafficanalyzer 1.2.0
7.5
CVSSv2
CVE-2011-4671
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL)....
Adrotateplugin Adrotate 3.6.3Adrotateplugin Adrotate 3.6.2Adrotateplugin Adrotate 3.3Adrotateplugin Adrotate 3.2.2Adrotateplugin Adrotate 3.0.1Adrotateplugin Adrotate 3.0Adrotateplugin Adrotate 2.4.1Adrotateplugin Adrotate 2.4Adrotateplugin Adrotate 1.0Adrotateplugin Adrotate 0.8Adrotateplugin Adrotate 0.2Adrotateplugin Adrotate 0.1Adrotateplugin AdrotateAdrotateplugin Adrotate 3.6.6Adrotateplugin Adrotate 3.5.1Adrotateplugin Adrotate 3.5Adrotateplugin Adrotate 3.1.1Adrotateplugin Adrotate 3.1Adrotateplugin Adrotate 2.5Adrotateplugin Adrotate 2.4.4Adrotateplugin Adrotate 2.2Adrotateplugin Adrotate 2.1Adrotateplugin Adrotate 0.6Adrotateplugin Adrotate 0.5Adrotateplugin Adrotate 3.6.1Adrotateplugin Adrotate 3.6Adrotateplugin Adrotate 3.2.1Adrotateplugin Adrotate 3.2Adrotateplugin Adrotate 2.6.1Adrotateplugin Adrotate 2.6Adrotateplugin Adrotate 2.5.1Adrotateplugin Adrotate 2.3.1Adrotateplugin Adrotate 2.3Adrotateplugin Adrotate 0.7.1Adrotateplugin Adrotate 0.7Adrotateplugin Adrotate 3.6.5Adrotateplugin Adrotate 3.6.4Adrotateplugin Adrotate 3.4Adrotateplugin Adrotate 3.3.1Adrotateplugin Adrotate 3.0.3Adrotateplugin Adrotate 3.0.2Adrotateplugin Adrotate 2.4.3Adrotateplugin Adrotate 2.4.2Adrotateplugin Adrotate 2.0.1Adrotateplugin Adrotate 2.0Adrotateplugin Adrotate 0.4Adrotateplugin Adrotate 0.3
NA
CVE-2021-24284
The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files...
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-29506CVE-2020-20092encryptionCVE-2021-21551arbitrary unspecifiedCVE-2020-23689CVE-2021-28476CVE-2021-20996
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook