Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 3.4 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2017-14719
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
Wordpress Wordpress 4.7.1Wordpress Wordpress 4.7.2Wordpress Wordpress 4.6.6Wordpress Wordpress 4.6.5Wordpress Wordpress 4.6.4Wordpress Wordpress 4.5.7Wordpress Wordpress 4.5.6Wordpress Wordpress 4.5Wordpress Wordpress 4.4.9Wordpress Wordpress 4.4.11Wordpress Wordpress 4.4.10Wordpress Wordpress 4.3.5Wordpress Wordpress 4.3.4Wordpress Wordpress 4.3Wordpress Wordpress 4.2.9Wordpress Wordpress 4.2.16Wordpress Wordpress 4.2.15Wordpress Wordpress 4.2Wordpress Wordpress 4.1.9Wordpress Wordpress 4.1.2Wordpress Wordpress 4.1.19Wordpress Wordpress 4.1.11
NA
CVE-2012-3383
The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x prior to 3.4.2, when the multisite feature is enabled, does not properly assign the unfiltered_html capability, which allows remote authenticated users to bypass intended access restrictions and conduct ...
Wordpress Wordpress 3.4.0
NA
CVE-2013-2705
Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin prior to 3.6 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that change plugin settings.
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.3.1Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.2.9Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.5Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.3Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.1Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.6Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.4Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.2.8Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.2.7Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.8Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.6Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.2.2Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.2Tipsandtricks-hq Wordpress Simple Paypal Shopping CartTipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.4Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.0Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.9Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.8Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.7Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.3.2Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.3.0Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.4
NA
CVE-2011-3862
Cross-site scripting (XSS) vulnerability in the Morning Coffee theme prior to 3.6 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to index.php.
Adazing Morning CoffeeAdazing Morning Coffee 2.7Adazing Morning Coffee 2.8Adazing Morning Coffee 2.9Adazing Morning Coffee 3.0Adazing Morning Coffee 3.1Adazing Morning Coffee 3.2Adazing Morning Coffee 3.4
7.2
CVSSv3
CVE-2015-5533
SQL injection vulnerability in counter-options.php in the Count Per Day plugin prior to 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpd_keep_month parameter to wp-admin/options-general.php. NOTE: this can be leveraged u...
Count Per Day Project Count Per Day
NA
CVE-2015-2755
Multiple cross-site request forgery (CSRF) vulnerabilities in the AB Google Map Travel (AB-MAP) plugin prior to 4.0 for WordPress allow remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) l...
Ab Google Map Travel Project Ab Google Map Travel
NA
CVE-2008-6811
Unrestricted file upload vulnerability in image_processing.php in the e-Commerce Plugin 3.4 and previous versions for Wordpress allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the ...
Instinct E-commerce Plugin
NA
CVE-2011-4671
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions prior to 3.6.8, for WordPress allows remote malicious users to execute arbitrary SQL commands via the track parameter (aka redirect URL).
Adrotateplugin Adrotate 3.6.3Adrotateplugin Adrotate 3.6.2Adrotateplugin Adrotate 3.3Adrotateplugin Adrotate 3.2.2Adrotateplugin Adrotate 3.0.1Adrotateplugin Adrotate 3.0Adrotateplugin Adrotate 2.4.1Adrotateplugin Adrotate 2.4Adrotateplugin Adrotate 1.0Adrotateplugin Adrotate 0.8Adrotateplugin Adrotate 0.2Adrotateplugin Adrotate 0.1Adrotateplugin AdrotateAdrotateplugin Adrotate 3.6.6Adrotateplugin Adrotate 3.5.1Adrotateplugin Adrotate 3.5Adrotateplugin Adrotate 3.1.1Adrotateplugin Adrotate 3.1Adrotateplugin Adrotate 2.5Adrotateplugin Adrotate 2.4.4Adrotateplugin Adrotate 2.2Adrotateplugin Adrotate 2.1
NA
CVE-2011-3850
Cross-site scripting (XSS) vulnerability in the Atahualpa theme prior to 3.6.8 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Bytesforall AtahualpaBytesforall Atahualpa 2.0Bytesforall Atahualpa 2.01Bytesforall Atahualpa 2.2Bytesforall Atahualpa 2.21Bytesforall Atahualpa 3.1Bytesforall Atahualpa 3.1.1Bytesforall Atahualpa 3.1.2Bytesforall Atahualpa 3.1.3Bytesforall Atahualpa 3.1.4Bytesforall Atahualpa 3.1.5Bytesforall Atahualpa 3.1.6Bytesforall Atahualpa 3.1.8Bytesforall Atahualpa 3.1.9Bytesforall Atahualpa 3.2Bytesforall Atahualpa 3.4Bytesforall Atahualpa 3.4.01Bytesforall Atahualpa 3.4.1Bytesforall Atahualpa 3.4.3Bytesforall Atahualpa 3.4.4Bytesforall Atahualpa 3.4.5Bytesforall Atahualpa 3.4.6
NA
CVE-2013-1852
SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin prior to 3.8.1 for WordPress allows remote malicious users to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.
Kolja Schleich LeaguemanagerKolja Schleich Leaguemanager 3.7Kolja Schleich Leaguemanager 3.6.9Kolja Schleich Leaguemanager 3.5.2Kolja Schleich Leaguemanager 3.5.1Kolja Schleich Leaguemanager 3.5Kolja Schleich Leaguemanager 3.4.2Kolja Schleich Leaguemanager 3.1.7Kolja Schleich Leaguemanager 3.1.6Kolja Schleich Leaguemanager 3.1.5Kolja Schleich Leaguemanager 3.1.4Kolja Schleich Leaguemanager 2.9Kolja Schleich Leaguemanager 2.8Kolja Schleich Leaguemanager 2.7.1Kolja Schleich Leaguemanager 2.1Kolja Schleich Leaguemanager 2.0Kolja Schleich Leaguemanager 1.5Kolja Schleich Leaguemanager 1.4.2Kolja Schleich Leaguemanager 3.6.7Kolja Schleich Leaguemanager 3.6.5Kolja Schleich Leaguemanager 3.6Kolja Schleich Leaguemanager 3.5.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook