wordpress wordpress 3.1.1 vulnerabilities and exploits

(subscribe to this query)

The make_clickable function in wp-includes/formatting.php in WordPress prior to 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote malicious users to cause a denial of service (crash) via a comment with a crafted URL that triggers many...

Wordpress Wordpress Wordpress Wordpress 0.71 Wordpress Wordpress 1.0 Wordpress Wordpress 1.0.1 Wordpress Wordpress 1.0.2 Wordpress Wordpress 1.1.1 Wordpress Wordpress 1.2 Wordpress Wordpress 1.2.1 Wordpress Wordpress 1.2.2 Wordpress Wordpress 1.2.3 Wordpress Wordpress 1.2.4 Wordpress Wordpress 1.2.5

Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.

Wordpress Wordpress 3.0 Wordpress Wordpress 3.0.1 Wordpress Wordpress 3.0.2 Wordpress Wordpress 3.0.3 Wordpress Wordpress 3.0.4 Wordpress Wordpress 3.0.5 Wordpress Wordpress 3.0.6 Wordpress Wordpress 3.1 Wordpress Wordpress 3.1.1 Wordpress Wordpress 3.1.2 Wordpress Wordpress 3.1.3 Wordpress Wordpress 3.1.4

1 Github repository

The Incutio XML-RPC (IXR) Library, as used in WordPress prior to 3.9.2 and Drupal 6.x prior to 6.33 and 7.x prior to 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote malicious users to cause a denial of service (memory a...

Wordpress Wordpress Wordpress Wordpress 3.0 Wordpress Wordpress 3.0.1 Wordpress Wordpress 3.0.2 Wordpress Wordpress 3.0.3 Wordpress Wordpress 3.0.4 Wordpress Wordpress 3.0.5 Wordpress Wordpress 3.0.6 Wordpress Wordpress 3.1 Wordpress Wordpress 3.1.1 Wordpress Wordpress 3.1.2 Wordpress Wordpress 3.1.3

The Incutio XML-RPC (IXR) Library, as used in WordPress prior to 3.9.2 and Drupal 6.x prior to 6.33 and 7.x prior to 7.31, does not limit the number of elements in an XML document, which allows remote malicious users to cause a denial of service (CPU consumption) via a large docu...

Wordpress Wordpress Wordpress Wordpress 3.0 Wordpress Wordpress 3.0.1 Wordpress Wordpress 3.0.2 Wordpress Wordpress 3.0.3 Wordpress Wordpress 3.0.4 Wordpress Wordpress 3.0.5 Wordpress Wordpress 3.0.6 Wordpress Wordpress 3.1 Wordpress Wordpress 3.1.1 Wordpress Wordpress 3.1.2 Wordpress Wordpress 3.1.3

An issue exists in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-security-audit-log/* files is not restricted. For example, these files are indexed by Google and allows for malicious users to possibly find sensitive information.

Wpsecurityauditlog Wp Security Audit Log 3.1.1

1 EDB exploit

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain sensitive information via the ps command.

Xcloner Xcloner 3.1.1 Xcloner Xcloner 3.5.1

1 EDB exploit

cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to execute arbitrary code via shell metacharacters in the (1) file name when creating a backup or vectors related to the (2) $_CONFIG[tarpath], (3) $exclude, (4) $_CO...

Xcloner Xcloner 3.1.1 Xcloner Xcloner 3.5.1

1 EDB exploit

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with insufficient access control, which allows remote malicious users to obtain sensitive information via a direct request to a backup file in admin...

Xcloner Xcloner 3.1.1 Xcloner Xcloner 3.5.1

1 EDB exploit

Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to read arbitrary files via a .. (dot dot) in the file parameter in a json_return action in the xcloner_show page to wp-admin/admin-ajax.php.

Xcloner Xcloner 3.1.1 Xcloner Xcloner 3.5.1

1 EDB exploit

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in the configuration panel, which allows remote malicious users to obtain sensitive information via unspecified vectors.

Xcloner Xcloner 3.1.1 Xcloner Xcloner 3.5.1

1 EDB exploit

« PREV 1 2 3 4 5 6 7 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook