Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 4.1.1 vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2015-3439
Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3.9.x, 4.0.x, and 4.1.x before 4.1.2 and other products, allows remote attackers to execute same-origin JavaScript functions via the target...
Debian Debian Linux 8.0Debian Debian Linux 7.0Wordpress Wordpress 3.9.3Wordpress Wordpress 4.0Wordpress Wordpress 3.9.0Wordpress Wordpress 4.1.1Wordpress Wordpress 3.9.1Wordpress Wordpress 3.9.2Wordpress Wordpress 4.0.1Wordpress Wordpress 4.1
7.5
CVSSv3
CVE-2017-14719
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components....
Wordpress Wordpress 4.7.1Wordpress Wordpress 4.7.2Wordpress Wordpress 4.6.6Wordpress Wordpress 4.6.5Wordpress Wordpress 4.6.4Wordpress Wordpress 4.5.7Wordpress Wordpress 4.5.6Wordpress Wordpress 4.5Wordpress Wordpress 4.4.9Wordpress Wordpress 4.4.11Wordpress Wordpress 4.4.10Wordpress Wordpress 4.3.5Wordpress Wordpress 4.3.4Wordpress Wordpress 4.3Wordpress Wordpress 4.2.9Wordpress Wordpress 4.2.16Wordpress Wordpress 4.2.15Wordpress Wordpress 4.2Wordpress Wordpress 4.1.9Wordpress Wordpress 4.1.2Wordpress Wordpress 4.1.19Wordpress Wordpress 4.1.11Wordpress Wordpress 4.1.10Wordpress Wordpress 4.0.5Wordpress Wordpress 4.0.4Wordpress Wordpress 4.0.15Wordpress Wordpress 4.0.14Wordpress Wordpress 3.9.8Wordpress Wordpress 3.9.7Wordpress Wordpress 3.9.19Wordpress Wordpress 3.9.18Wordpress Wordpress 3.9.11Wordpress Wordpress 3.9.10Wordpress Wordpress 3.9.1Wordpress Wordpress 3.8.4Wordpress Wordpress 3.8.3Wordpress Wordpress 3.8.17Wordpress Wordpress 3.8.16Wordpress Wordpress 3.8.1Wordpress Wordpress 3.8Wordpress Wordpress 4.7Wordpress Wordpress 4.8.1Wordpress Wordpress 4.6.7Wordpress Wordpress 4.5.9Wordpress Wordpress 4.5.8Wordpress Wordpress 4.5.10Wordpress Wordpress 4.5.1Wordpress Wordpress 4.4.4Wordpress Wordpress 4.4.3Wordpress Wordpress 4.4.2Wordpress Wordpress 4.3.7Wordpress Wordpress 4.3.6Wordpress Wordpress 4.3.10Wordpress Wordpress 4.3.1Wordpress Wordpress 4.2.4Wordpress Wordpress 4.2.3Wordpress Wordpress 4.2.2Wordpress Wordpress 4.2.10Wordpress Wordpress 4.2.1Wordpress Wordpress 4.1.4Wordpress Wordpress 4.1.3Wordpress Wordpress 4.1.13Wordpress Wordpress 4.1.12Wordpress Wordpress 4.0.7Wordpress Wordpress 4.0.6Wordpress Wordpress 4.0.17Wordpress Wordpress 4.0.16Wordpress Wordpress 4.0Wordpress Wordpress 3.9.9Wordpress Wordpress 3.9.20Wordpress Wordpress 3.9.2Wordpress Wordpress 3.9.13Wordpress Wordpress 3.9.12Wordpress Wordpress 3.8.6Wordpress Wordpress 3.8.5Wordpress Wordpress 3.8.19Wordpress Wordpress 4.7.5Wordpress Wordpress 4.8Wordpress Wordpress 4.6.1Wordpress Wordpress 4.6Wordpress Wordpress 4.5.3Wordpress Wordpress 4.5.2Wordpress Wordpress 4.4.6Wordpress Wordpress 4.4.5Wordpress Wordpress 4.3.9Wordpress Wordpress 4.3.8Wordpress Wordpress 4.3.12Wordpress Wordpress 4.3.11Wordpress Wordpress 4.2.6Wordpress Wordpress 4.2.5Wordpress Wordpress 4.2.12Wordpress Wordpress 4.2.11Wordpress Wordpress 4.1.6Wordpress Wordpress 4.1.5Wordpress Wordpress 4.1.16Wordpress Wordpress 4.1.15Wordpress Wordpress 4.1.14Wordpress Wordpress 4.0.9Wordpress Wordpress 4.0.8Wordpress Wordpress 4.0.19Wordpress Wordpress 4.0.18Wordpress Wordpress 4.0.10Wordpress Wordpress 4.0.1Wordpress Wordpress 3.9.4Wordpress Wordpress 3.9.3Wordpress Wordpress 3.9.15Wordpress Wordpress 3.9.14Wordpress Wordpress 3.8.8Wordpress Wordpress 3.8.7Wordpress Wordpress 3.8.20Wordpress Wordpress 3.8.2Wordpress Wordpress 3.8.13Wordpress Wordpress 3.8.12Wordpress Wordpress 3.7.6Wordpress Wordpress 3.7.5Wordpress Wordpress 3.7.19Wordpress Wordpress 3.7.18Wordpress Wordpress 3.7.11Wordpress Wordpress 3.7.10Wordpress Wordpress 3.4.2Wordpress Wordpress 3.4.1Wordpress Wordpress 3.2Wordpress Wordpress 3.1.4Wordpress Wordpress 3.0.4Wordpress Wordpress 3.0.3Wordpress Wordpress 3.8.18Wordpress Wordpress 3.8.11Wordpress Wordpress 3.8.10Wordpress Wordpress 3.7.4Wordpress Wordpress 3.7.3Wordpress Wordpress 3.7.17Wordpress Wordpress 3.7.16Wordpress Wordpress 3.7.1Wordpress Wordpress 3.7Wordpress Wordpress 3.6.1Wordpress Wordpress 3.4Wordpress Wordpress 3.3.3Wordpress Wordpress 3.1.3Wordpress Wordpress 3.1.2Wordpress Wordpress 3.0.1Wordpress Wordpress 3.0Wordpress Wordpress 3.0.2Wordpress Wordpress 3.7.9Wordpress Wordpress 3.7.22Wordpress Wordpress 3.7.21Wordpress Wordpress 3.7.15Wordpress Wordpress 3.7.14Wordpress Wordpress 3.6Wordpress Wordpress 3.5.2Wordpress Wordpress 3.3.2Wordpress Wordpress 3.3.1Wordpress Wordpress 3.1.1Wordpress Wordpress 3.1Wordpress Wordpress 4.7.3Wordpress Wordpress 4.7.4Wordpress Wordpress 4.6.3Wordpress Wordpress 4.6.2Wordpress Wordpress 4.5.5Wordpress Wordpress 4.5.4Wordpress Wordpress 4.4.8Wordpress Wordpress 4.4.7Wordpress Wordpress 4.4.1Wordpress Wordpress 4.4Wordpress Wordpress 4.3.3Wordpress Wordpress 4.3.2Wordpress Wordpress 4.2.8Wordpress Wordpress 4.2.7Wordpress Wordpress 4.2.14Wordpress Wordpress 4.2.13Wordpress Wordpress 4.1.8Wordpress Wordpress 4.1.7Wordpress Wordpress 4.1.18Wordpress Wordpress 4.1.17Wordpress Wordpress 4.1.1Wordpress Wordpress 4.1Wordpress Wordpress 4.0.3Wordpress Wordpress 4.0.2Wordpress Wordpress 4.0.13Wordpress Wordpress 4.0.12Wordpress Wordpress 4.0.11Wordpress Wordpress 3.9.6Wordpress Wordpress 3.9.5Wordpress Wordpress 3.9.17Wordpress Wordpress 3.9.16Wordpress Wordpress 3.9Wordpress Wordpress 3.8.9Wordpress Wordpress 3.8.22Wordpress Wordpress 3.8.21Wordpress Wordpress 3.8.15Wordpress Wordpress 3.8.14Wordpress Wordpress 3.7.8Wordpress Wordpress 3.7.7Wordpress Wordpress 3.7.20Wordpress Wordpress 3.7.2Wordpress Wordpress 3.7.13Wordpress Wordpress 3.7.12Wordpress Wordpress 3.5.1Wordpress Wordpress 3.5Wordpress Wordpress 3.3Wordpress Wordpress 3.2.1Wordpress Wordpress 3.0.6Wordpress Wordpress 3.0.5
6.5
CVSSv3
CVE-2016-11011
The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation....
Usabilitydynamics Wp-invoice
4.3
CVE-2022-38058
Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress....
Wpvar Wp Shamsi
5.3
CVSSv3
CVE-2016-11010
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates....
Usabilitydynamics Wp-invoice
5.3
CVSSv3
CVE-2016-11006
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes....
Usabilitydynamics Wp-invoice
5.3
CVSSv3
CVE-2016-11007
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval....
Usabilitydynamics Wp-invoice
5.3
CVSSv3
CVE-2016-11008
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates....
Usabilitydynamics Wp-invoice
5.3
CVSSv3
CVE-2016-11009
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates....
Usabilitydynamics Wp-invoice
5.4
CVSSv3
CVE-2021-25065
The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page....
Smashballoon Smash Balloon Social Post Feed
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
remoteCVE-2022-47986CVE-2023-20963CVE-2023-1013CVE-2022-43628CVE-2023-1014log injectionCVE-2022-43639SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook