Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
By Recent Activity
wordpress wordpress 4.0 vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2014-9033
Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote attackers to hijack the authentication of arbitrary users for requests that reset passwords....
Wordpress Wordpress 3.7.4
Wordpress Wordpress 3.8.4
Wordpress Wordpress 3.9.2
Wordpress Wordpress 4.0
4.3
CVSSv2
CVE-2014-9032
Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....
Wordpress Wordpress 3.9
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 4.0
6.4
CVSSv2
CVE-2014-9038
wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) attacks by referring to a 127.0.0.0/8 resource....
Wordpress Wordpress
Wordpress Wordpress 3.8
Wordpress Wordpress 3.8.1
Wordpress Wordpress 3.8.2
Wordpress Wordpress 3.8.3
Wordpress Wordpress 3.8.4
Wordpress Wordpress 3.9
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 4.0
1 Github repository available
5
CVSSv2
CVE-2014-9034
wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing, a similar issue to...
Wordpress Wordpress
Wordpress Wordpress 3.8
Wordpress Wordpress 3.8.1
Wordpress Wordpress 3.8.2
Wordpress Wordpress 3.8.3
Wordpress Wordpress 3.8.4
Wordpress Wordpress 3.9
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 4.0
2 EDB exploits available
1 Metasploit module available
2 Github repositories available
4.3
CVSSv2
CVE-2014-9035
Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....
Wordpress Wordpress
Wordpress Wordpress 3.8
Wordpress Wordpress 3.8.1
Wordpress Wordpress 3.8.2
Wordpress Wordpress 3.8.3
Wordpress Wordpress 3.8.4
Wordpress Wordpress 3.9
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 4.0
Debian Debian Linux 7.0
Debian Debian Linux 8.0
4.3
CVSSv2
CVE-2014-9036
Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted Cascading Style Sheets (CSS) token sequence in a post....
Wordpress Wordpress
Wordpress Wordpress 3.8
Wordpress Wordpress 3.8.1
Wordpress Wordpress 3.8.2
Wordpress Wordpress 3.8.3
Wordpress Wordpress 3.8.4
Wordpress Wordpress 3.9
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 4.0
Debian Debian Linux 7.0
Debian Debian Linux 8.0
4.3
CVSSv2
CVE-2015-3439
Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3.9.x, 4.0.x, and 4.1.x before 4.1.2 and other products, allows remote attackers to execute same-origin JavaScript functions via the target...
Debian Debian Linux 7.0
Debian Debian Linux 8.0
Wordpress Wordpress 3.9.0
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 3.9.3
Wordpress Wordpress 4.0
Wordpress Wordpress 4.0.1
Wordpress Wordpress 4.1
Wordpress Wordpress 4.1.1
1 Github repository available
6.8
CVSSv2
CVE-2014-9037
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash....
Mageia Project Mageia 3
Mageia Project Mageia 4
Wordpress Wordpress
Wordpress Wordpress 3.8
Wordpress Wordpress 3.8.1
Wordpress Wordpress 3.8.2
Wordpress Wordpress 3.8.3
Wordpress Wordpress 3.8.4
Wordpress Wordpress 3.9
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 4.0
Debian Debian Linux 7.0
Debian Debian Linux 8.0
4.3
CVSSv2
CVE-2014-9039
wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message....
Debian Debian Linux 7.0
Debian Debian Linux 8.0
Mageia Project Mageia 3
Mageia Project Mageia 4
Wordpress Wordpress
Wordpress Wordpress 3.8
Wordpress Wordpress 3.8.1
Wordpress Wordpress 3.8.2
Wordpress Wordpress 3.8.3
Wordpress Wordpress 3.8.4
Wordpress Wordpress 3.9
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 4.0
5
CVSSv2
CVE-2017-14719
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components....
Wordpress Wordpress 3.0
Wordpress Wordpress 3.0.1
Wordpress Wordpress 3.0.2
Wordpress Wordpress 3.0.3
Wordpress Wordpress 3.0.4
Wordpress Wordpress 3.0.5
Wordpress Wordpress 3.0.6
Wordpress Wordpress 3.1
Wordpress Wordpress 3.1.1
Wordpress Wordpress 3.1.2
Wordpress Wordpress 3.1.3
Wordpress Wordpress 3.1.4
Wordpress Wordpress 3.2
Wordpress Wordpress 3.2.1
Wordpress Wordpress 3.3
Wordpress Wordpress 3.3.1
Wordpress Wordpress 3.3.2
Wordpress Wordpress 3.3.3
Wordpress Wordpress 3.4
Wordpress Wordpress 3.4.1
Wordpress Wordpress 3.4.2
Wordpress Wordpress 3.5
Wordpress Wordpress 3.5.1
Wordpress Wordpress 3.5.2
Wordpress Wordpress 3.6
Wordpress Wordpress 3.6.1
Wordpress Wordpress 3.7
Wordpress Wordpress 3.7.1
Wordpress Wordpress 3.7.2
Wordpress Wordpress 3.7.3
Wordpress Wordpress 3.7.4
Wordpress Wordpress 3.7.5
Wordpress Wordpress 3.7.6
Wordpress Wordpress 3.7.7
Wordpress Wordpress 3.7.8
Wordpress Wordpress 3.7.9
Wordpress Wordpress 3.7.10
Wordpress Wordpress 3.7.11
Wordpress Wordpress 3.7.12
Wordpress Wordpress 3.7.13
Wordpress Wordpress 3.7.14
Wordpress Wordpress 3.7.15
Wordpress Wordpress 3.7.16
Wordpress Wordpress 3.7.17
Wordpress Wordpress 3.7.18
Wordpress Wordpress 3.7.19
Wordpress Wordpress 3.7.20
Wordpress Wordpress 3.7.21
Wordpress Wordpress 3.7.22
Wordpress Wordpress 3.8
Wordpress Wordpress 3.8.1
Wordpress Wordpress 3.8.2
Wordpress Wordpress 3.8.3
Wordpress Wordpress 3.8.4
Wordpress Wordpress 3.8.5
Wordpress Wordpress 3.8.6
Wordpress Wordpress 3.8.7
Wordpress Wordpress 3.8.8
Wordpress Wordpress 3.8.9
Wordpress Wordpress 3.8.10
Wordpress Wordpress 3.8.11
Wordpress Wordpress 3.8.12
Wordpress Wordpress 3.8.13
Wordpress Wordpress 3.8.14
Wordpress Wordpress 3.8.15
Wordpress Wordpress 3.8.16
Wordpress Wordpress 3.8.17
Wordpress Wordpress 3.8.18
Wordpress Wordpress 3.8.19
Wordpress Wordpress 3.8.20
Wordpress Wordpress 3.8.21
Wordpress Wordpress 3.8.22
Wordpress Wordpress 3.9
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 3.9.3
Wordpress Wordpress 3.9.4
Wordpress Wordpress 3.9.5
Wordpress Wordpress 3.9.6
Wordpress Wordpress 3.9.7
Wordpress Wordpress 3.9.8
Wordpress Wordpress 3.9.9
Wordpress Wordpress 3.9.10
Wordpress Wordpress 3.9.11
Wordpress Wordpress 3.9.12
Wordpress Wordpress 3.9.13
Wordpress Wordpress 3.9.14
Wordpress Wordpress 3.9.15
Wordpress Wordpress 3.9.16
Wordpress Wordpress 3.9.17
Wordpress Wordpress 3.9.18
Wordpress Wordpress 3.9.19
Wordpress Wordpress 3.9.20
Wordpress Wordpress 4.0
Wordpress Wordpress 4.0.1
Wordpress Wordpress 4.0.2
Wordpress Wordpress 4.0.3
Wordpress Wordpress 4.0.4
Wordpress Wordpress 4.0.5
Wordpress Wordpress 4.0.6
Wordpress Wordpress 4.0.7
Wordpress Wordpress 4.0.8
Wordpress Wordpress 4.0.9
Wordpress Wordpress 4.0.10
Wordpress Wordpress 4.0.11
Wordpress Wordpress 4.0.12
Wordpress Wordpress 4.0.13
Wordpress Wordpress 4.0.14
Wordpress Wordpress 4.0.15
Wordpress Wordpress 4.0.16
Wordpress Wordpress 4.0.17
Wordpress Wordpress 4.0.18
Wordpress Wordpress 4.0.19
Wordpress Wordpress 4.1
Wordpress Wordpress 4.1.1
Wordpress Wordpress 4.1.2
Wordpress Wordpress 4.1.3
Wordpress Wordpress 4.1.4
Wordpress Wordpress 4.1.5
Wordpress Wordpress 4.1.6
Wordpress Wordpress 4.1.7
Wordpress Wordpress 4.1.8
Wordpress Wordpress 4.1.9
Wordpress Wordpress 4.1.10
Wordpress Wordpress 4.1.11
Wordpress Wordpress 4.1.12
Wordpress Wordpress 4.1.13
Wordpress Wordpress 4.1.14
Wordpress Wordpress 4.1.15
Wordpress Wordpress 4.1.16
Wordpress Wordpress 4.1.17
Wordpress Wordpress 4.1.18
Wordpress Wordpress 4.1.19
Wordpress Wordpress 4.2
Wordpress Wordpress 4.2.1
Wordpress Wordpress 4.2.2
Wordpress Wordpress 4.2.3
Wordpress Wordpress 4.2.4
Wordpress Wordpress 4.2.5
Wordpress Wordpress 4.2.6
Wordpress Wordpress 4.2.7
Wordpress Wordpress 4.2.8
Wordpress Wordpress 4.2.9
Wordpress Wordpress 4.2.10
Wordpress Wordpress 4.2.11
Wordpress Wordpress 4.2.12
Wordpress Wordpress 4.2.13
Wordpress Wordpress 4.2.14
Wordpress Wordpress 4.2.15
Wordpress Wordpress 4.2.16
Wordpress Wordpress 4.3
Wordpress Wordpress 4.3.1
Wordpress Wordpress 4.3.2
Wordpress Wordpress 4.3.3
Wordpress Wordpress 4.3.4
Wordpress Wordpress 4.3.5
Wordpress Wordpress 4.3.6
Wordpress Wordpress 4.3.7
Wordpress Wordpress 4.3.8
Wordpress Wordpress 4.3.9
Wordpress Wordpress 4.3.10
Wordpress Wordpress 4.3.11
Wordpress Wordpress 4.3.12
Wordpress Wordpress 4.4
Wordpress Wordpress 4.4.1
Wordpress Wordpress 4.4.2
Wordpress Wordpress 4.4.3
Wordpress Wordpress 4.4.4
Wordpress Wordpress 4.4.5
Wordpress Wordpress 4.4.6
Wordpress Wordpress 4.4.7
Wordpress Wordpress 4.4.8
Wordpress Wordpress 4.4.9
Wordpress Wordpress 4.4.10
Wordpress Wordpress 4.4.11
Wordpress Wordpress 4.5
Wordpress Wordpress 4.5.1
Wordpress Wordpress 4.5.2
Wordpress Wordpress 4.5.3
Wordpress Wordpress 4.5.4
Wordpress Wordpress 4.5.5
Wordpress Wordpress 4.5.6
Wordpress Wordpress 4.5.7
Wordpress Wordpress 4.5.8
Wordpress Wordpress 4.5.9
Wordpress Wordpress 4.5.10
Wordpress Wordpress 4.6
Wordpress Wordpress 4.6.1
Wordpress Wordpress 4.6.2
Wordpress Wordpress 4.6.3
Wordpress Wordpress 4.6.4
Wordpress Wordpress 4.6.5
Wordpress Wordpress 4.6.6
Wordpress Wordpress 4.6.7
Wordpress Wordpress 4.7
Wordpress Wordpress 4.7.1
Wordpress Wordpress 4.7.2
Wordpress Wordpress 4.7.3
Wordpress Wordpress 4.7.4
Wordpress Wordpress 4.7.5
Wordpress Wordpress 4.8
Wordpress Wordpress 4.8.1
2 Github repositories available
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middle
CVE-2021-20661
CVE-2020-4953
CVE-2018-19518
CVE-2021-27645
CVE-2021-3156
CVE-2021-26684
deserialization
wireless
1
2
NEXT »