Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
By Recent Activity
wordpress wordpress 4.1 vulnerabilities and exploits
(subscribe to this query)
5.9
CVE-2022-3590
WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden....
Wordpress Wordpress
Wordpress Wordpress 4.1
1 Github repository available
NA
CVE-2015-3439
Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3.9.x, 4.0.x, and 4.1.x before 4.1.2 and other products, allows remote attackers to execute same-origin JavaScript functions via the target...
Debian Debian Linux 8.0
Debian Debian Linux 7.0
Wordpress Wordpress 3.9.3
Wordpress Wordpress 4.0
Wordpress Wordpress 3.9.0
Wordpress Wordpress 4.1.1
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.9.2
Wordpress Wordpress 4.0.1
Wordpress Wordpress 4.1
1 Github repository available
7.5
CVSSv3
CVE-2017-14719
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components....
Wordpress Wordpress 4.7.1
Wordpress Wordpress 4.7.2
Wordpress Wordpress 4.6.6
Wordpress Wordpress 4.6.5
Wordpress Wordpress 4.6.4
Wordpress Wordpress 4.5.7
Wordpress Wordpress 4.5.6
Wordpress Wordpress 4.5
Wordpress Wordpress 4.4.9
Wordpress Wordpress 4.4.11
Wordpress Wordpress 4.4.10
Wordpress Wordpress 4.3.5
Wordpress Wordpress 4.3.4
Wordpress Wordpress 4.3
Wordpress Wordpress 4.2.9
Wordpress Wordpress 4.2.16
Wordpress Wordpress 4.2.15
Wordpress Wordpress 4.2
Wordpress Wordpress 4.1.9
Wordpress Wordpress 4.1.2
Wordpress Wordpress 4.1.19
Wordpress Wordpress 4.1.11
Wordpress Wordpress 4.1.10
Wordpress Wordpress 4.0.5
Wordpress Wordpress 4.0.4
Wordpress Wordpress 4.0.15
Wordpress Wordpress 4.0.14
Wordpress Wordpress 3.9.8
Wordpress Wordpress 3.9.7
Wordpress Wordpress 3.9.19
Wordpress Wordpress 3.9.18
Wordpress Wordpress 3.9.11
Wordpress Wordpress 3.9.10
Wordpress Wordpress 3.9.1
Wordpress Wordpress 3.8.4
Wordpress Wordpress 3.8.3
Wordpress Wordpress 3.8.17
Wordpress Wordpress 3.8.16
Wordpress Wordpress 3.8.1
Wordpress Wordpress 3.8
Wordpress Wordpress 4.7
Wordpress Wordpress 4.8.1
Wordpress Wordpress 4.6.7
Wordpress Wordpress 4.5.9
Wordpress Wordpress 4.5.8
Wordpress Wordpress 4.5.10
Wordpress Wordpress 4.5.1
Wordpress Wordpress 4.4.4
Wordpress Wordpress 4.4.3
Wordpress Wordpress 4.4.2
Wordpress Wordpress 4.3.7
Wordpress Wordpress 4.3.6
Wordpress Wordpress 4.3.10
Wordpress Wordpress 4.3.1
Wordpress Wordpress 4.2.4
Wordpress Wordpress 4.2.3
Wordpress Wordpress 4.2.2
Wordpress Wordpress 4.2.10
Wordpress Wordpress 4.2.1
Wordpress Wordpress 4.1.4
Wordpress Wordpress 4.1.3
Wordpress Wordpress 4.1.13
Wordpress Wordpress 4.1.12
Wordpress Wordpress 4.0.7
Wordpress Wordpress 4.0.6
Wordpress Wordpress 4.0.17
Wordpress Wordpress 4.0.16
Wordpress Wordpress 4.0
Wordpress Wordpress 3.9.9
Wordpress Wordpress 3.9.20
Wordpress Wordpress 3.9.2
Wordpress Wordpress 3.9.13
Wordpress Wordpress 3.9.12
Wordpress Wordpress 3.8.6
Wordpress Wordpress 3.8.5
Wordpress Wordpress 3.8.19
Wordpress Wordpress 4.7.5
Wordpress Wordpress 4.8
Wordpress Wordpress 4.6.1
Wordpress Wordpress 4.6
Wordpress Wordpress 4.5.3
Wordpress Wordpress 4.5.2
Wordpress Wordpress 4.4.6
Wordpress Wordpress 4.4.5
Wordpress Wordpress 4.3.9
Wordpress Wordpress 4.3.8
Wordpress Wordpress 4.3.12
Wordpress Wordpress 4.3.11
Wordpress Wordpress 4.2.6
Wordpress Wordpress 4.2.5
Wordpress Wordpress 4.2.12
Wordpress Wordpress 4.2.11
Wordpress Wordpress 4.1.6
Wordpress Wordpress 4.1.5
Wordpress Wordpress 4.1.16
Wordpress Wordpress 4.1.15
Wordpress Wordpress 4.1.14
Wordpress Wordpress 4.0.9
Wordpress Wordpress 4.0.8
Wordpress Wordpress 4.0.19
Wordpress Wordpress 4.0.18
Wordpress Wordpress 4.0.10
Wordpress Wordpress 4.0.1
Wordpress Wordpress 3.9.4
Wordpress Wordpress 3.9.3
Wordpress Wordpress 3.9.15
Wordpress Wordpress 3.9.14
Wordpress Wordpress 3.8.8
Wordpress Wordpress 3.8.7
Wordpress Wordpress 3.8.20
Wordpress Wordpress 3.8.2
Wordpress Wordpress 3.8.13
Wordpress Wordpress 3.8.12
Wordpress Wordpress 3.7.6
Wordpress Wordpress 3.7.5
Wordpress Wordpress 3.7.19
Wordpress Wordpress 3.7.18
Wordpress Wordpress 3.7.11
Wordpress Wordpress 3.7.10
Wordpress Wordpress 3.4.2
Wordpress Wordpress 3.4.1
Wordpress Wordpress 3.2
Wordpress Wordpress 3.1.4
Wordpress Wordpress 3.0.4
Wordpress Wordpress 3.0.3
Wordpress Wordpress 3.8.18
Wordpress Wordpress 3.8.11
Wordpress Wordpress 3.8.10
Wordpress Wordpress 3.7.4
Wordpress Wordpress 3.7.3
Wordpress Wordpress 3.7.17
Wordpress Wordpress 3.7.16
Wordpress Wordpress 3.7.1
Wordpress Wordpress 3.7
Wordpress Wordpress 3.6.1
Wordpress Wordpress 3.4
Wordpress Wordpress 3.3.3
Wordpress Wordpress 3.1.3
Wordpress Wordpress 3.1.2
Wordpress Wordpress 3.0.1
Wordpress Wordpress 3.0
Wordpress Wordpress 3.0.2
Wordpress Wordpress 3.7.9
Wordpress Wordpress 3.7.22
Wordpress Wordpress 3.7.21
Wordpress Wordpress 3.7.15
Wordpress Wordpress 3.7.14
Wordpress Wordpress 3.6
Wordpress Wordpress 3.5.2
Wordpress Wordpress 3.3.2
Wordpress Wordpress 3.3.1
Wordpress Wordpress 3.1.1
Wordpress Wordpress 3.1
Wordpress Wordpress 4.7.3
Wordpress Wordpress 4.7.4
Wordpress Wordpress 4.6.3
Wordpress Wordpress 4.6.2
Wordpress Wordpress 4.5.5
Wordpress Wordpress 4.5.4
Wordpress Wordpress 4.4.8
Wordpress Wordpress 4.4.7
Wordpress Wordpress 4.4.1
Wordpress Wordpress 4.4
Wordpress Wordpress 4.3.3
Wordpress Wordpress 4.3.2
Wordpress Wordpress 4.2.8
Wordpress Wordpress 4.2.7
Wordpress Wordpress 4.2.14
Wordpress Wordpress 4.2.13
Wordpress Wordpress 4.1.8
Wordpress Wordpress 4.1.7
Wordpress Wordpress 4.1.18
Wordpress Wordpress 4.1.17
Wordpress Wordpress 4.1.1
Wordpress Wordpress 4.1
Wordpress Wordpress 4.0.3
Wordpress Wordpress 4.0.2
Wordpress Wordpress 4.0.13
Wordpress Wordpress 4.0.12
Wordpress Wordpress 4.0.11
Wordpress Wordpress 3.9.6
Wordpress Wordpress 3.9.5
Wordpress Wordpress 3.9.17
Wordpress Wordpress 3.9.16
Wordpress Wordpress 3.9
Wordpress Wordpress 3.8.9
Wordpress Wordpress 3.8.22
Wordpress Wordpress 3.8.21
Wordpress Wordpress 3.8.15
Wordpress Wordpress 3.8.14
Wordpress Wordpress 3.7.8
Wordpress Wordpress 3.7.7
Wordpress Wordpress 3.7.20
Wordpress Wordpress 3.7.2
Wordpress Wordpress 3.7.13
Wordpress Wordpress 3.7.12
Wordpress Wordpress 3.5.1
Wordpress Wordpress 3.5
Wordpress Wordpress 3.3
Wordpress Wordpress 3.2.1
Wordpress Wordpress 3.0.6
Wordpress Wordpress 3.0.5
3 Github repositories available
6.1
CVSSv3
CVE-2014-9310
Cross-site scripting (XSS) vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for WordPress....
Wordpress Backup To Dropbox Project Wordpress Backup To Dropbox
4.8
CVE-2022-2398
The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed...
Najeebmedia Wordpress Comments Fields
NA
CVE-2010-4277
Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php....
Jovelstefan Embedded-video 4.1
NA
CVE-2011-3855
Cross-site scripting (XSS) vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter....
Graphpaperpress F8 Lite 1.2
Graphpaperpress F8 Lite 1.3
Graphpaperpress F8 Lite 2.0.1
Graphpaperpress F8 Lite 4.1
Graphpaperpress F8 Lite 1.1
Graphpaperpress F8 Lite 4.2.0
Graphpaperpress F8 Lite
1 EDB exploit available
NA
CVE-2011-3854
Cross-site scripting (XSS) vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter....
Quirm Zenlite 1.1
Quirm Zenlite 1.2
Quirm Zenlite 2.7
Quirm Zenlite 3.0
Quirm Zenlite 3.52
Quirm Zenlite 3.60
Quirm Zenlite 2.2
Quirm Zenlite 2.4
Quirm Zenlite 3.3
Quirm Zenlite 3.4
Quirm Zenlite 4.1
Quirm Zenlite 4.2
Quirm Zenlite 1.3
Quirm Zenlite 2.0
Quirm Zenlite 2.1
Quirm Zenlite 3.1
Quirm Zenlite 3.2
Quirm Zenlite 3.61
Quirm Zenlite 4.0
Quirm Zenlite
Quirm Zenlite 1.0
Quirm Zenlite 2.5
Quirm Zenlite 2.6
Quirm Zenlite 3.5
Quirm Zenlite 3.51
NA
CVE-2014-7152
Cross-site scripting (XSS) vulnerability in the Easy MailChimp Forms plugin 3.0 through 5.0.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the update_options action to wp-admin/admin-ajax.php....
Mailchimp Easy Mailchimp Forms Plugin 5.0.6
Mailchimp Easy Mailchimp Forms Plugin 5.0.5
Mailchimp Easy Mailchimp Forms Plugin 5.0.3
Mailchimp Easy Mailchimp Forms Plugin 4.2
Mailchimp Easy Mailchimp Forms Plugin 4.0
Mailchimp Easy Mailchimp Forms Plugin 5.0.1
Mailchimp Easy Mailchimp Forms Plugin 5.0
Mailchimp Easy Mailchimp Forms Plugin 4.4
Mailchimp Easy Mailchimp Forms Plugin 4.3
Mailchimp Easy Mailchimp Forms Plugin 5.0.4
Mailchimp Easy Mailchimp Forms Plugin 5.0.2
Mailchimp Easy Mailchimp Forms Plugin 4.2.1
Mailchimp Easy Mailchimp Forms Plugin 4.1
Mailchimp Easy Mailchimp Forms Plugin 3.0
6.1
CVSSv3
CVE-2014-10391
The wp-support-plus-responsive-ticket-system plugin before 4.1 for WordPress has JavaScript injection....
Wpsupportplus Wp Support Plus Responsive Ticket System
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2023-21068
CVE-2023-21077
unspecified
CVE-2023-21070
CVE-2023-21016
file upload
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »