Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 3.3.2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-3128
WordPress 3.1 prior to 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote malicious users to obtain sensitive data via vectors related to wp-includes/post.php.
Wordpress Wordpress 3.1Wordpress Wordpress 3.1.1Wordpress Wordpress 3.1.2Wordpress Wordpress 3.2
NA
CVE-2011-3127
WordPress 3.1 prior to 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote malicious users to conduct clickjacking attacks via a crafted web site.
Wordpress Wordpress 3.1Wordpress Wordpress 3.2Wordpress Wordpress 3.1.1Wordpress Wordpress 3.1.2
NA
CVE-2012-3414
Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and previous versions, as used in WordPress prior to 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote malicious users to inject arbitrary web script or HTML via the movieName paramet...
Wordpress Wordpress 3.0.1Wordpress Wordpress 3.0.2Wordpress Wordpress 3.1.2Wordpress Wordpress 3.1.3Swfupload Project Swfupload 1.0.2Swfupload Project Swfupload 2.0.2Wordpress Wordpress 3.0.3Wordpress Wordpress 3.0.4Wordpress Wordpress 3.1.4Wordpress Wordpress 3.2Swfupload Project Swfupload 2.1.0Wordpress Wordpress 3.0.5Wordpress Wordpress 3.0.6Wordpress Wordpress 3.2.1Wordpress Wordpress 3.3Swfupload Project Swfupload 2.2.0Swfupload Project SwfuploadWordpress Wordpress -Wordpress Wordpress 3.0Wordpress Wordpress 3.1Wordpress Wordpress 3.1.1Wordpress Wordpress
7.5
CVSSv3
CVE-2017-14719
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
Wordpress Wordpress 4.7.1Wordpress Wordpress 4.7.2Wordpress Wordpress 4.6.6Wordpress Wordpress 4.6.5Wordpress Wordpress 4.6.4Wordpress Wordpress 4.5.7Wordpress Wordpress 4.5.6Wordpress Wordpress 4.5Wordpress Wordpress 4.4.9Wordpress Wordpress 4.4.11Wordpress Wordpress 4.4.10Wordpress Wordpress 4.3.5Wordpress Wordpress 4.3.4Wordpress Wordpress 4.3Wordpress Wordpress 4.2.9Wordpress Wordpress 4.2.16Wordpress Wordpress 4.2.15Wordpress Wordpress 4.2Wordpress Wordpress 4.1.9Wordpress Wordpress 4.1.2Wordpress Wordpress 4.1.19Wordpress Wordpress 4.1.11
NA
CVE-2014-5266
The Incutio XML-RPC (IXR) Library, as used in WordPress prior to 3.9.2 and Drupal 6.x prior to 6.33 and 7.x prior to 7.31, does not limit the number of elements in an XML document, which allows remote malicious users to cause a denial of service (CPU consumption) via a large docu...
Wordpress Wordpress 3.0Wordpress Wordpress 3.0.1Wordpress Wordpress 3.0.2Wordpress Wordpress 3.0.3Wordpress Wordpress 3.3.1Wordpress Wordpress 3.3.2Wordpress Wordpress 3.3.3Wordpress Wordpress 3.4.0Wordpress Wordpress 3.0.4Wordpress Wordpress 3.0.6Wordpress Wordpress 3.2Wordpress Wordpress 3.3Wordpress Wordpress 3.4.1Wordpress Wordpress 3.5.0Wordpress Wordpress 3.8.1Wordpress WordpressWordpress Wordpress 3.1.1Wordpress Wordpress 3.1.2Wordpress Wordpress 3.1.3Wordpress Wordpress 3.1.4Wordpress Wordpress 3.6Wordpress Wordpress 3.6.1
NA
CVE-2014-5265
The Incutio XML-RPC (IXR) Library, as used in WordPress prior to 3.9.2 and Drupal 6.x prior to 6.33 and 7.x prior to 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote malicious users to cause a denial of service (memory a...
Wordpress Wordpress 3.0Wordpress Wordpress 3.0.1Wordpress Wordpress 3.0.2Wordpress Wordpress 3.3.1Wordpress Wordpress 3.3.2Wordpress Wordpress 3.3.3Wordpress Wordpress 3.4.0Wordpress Wordpress 3.1Wordpress Wordpress 3.1.1Wordpress Wordpress 3.1.2Wordpress Wordpress 3.1.3Wordpress Wordpress 3.1.4Wordpress Wordpress 3.6Wordpress Wordpress 3.6.1Wordpress Wordpress 3.7Wordpress Wordpress 3.7.1Wordpress Wordpress 3.0.4Wordpress Wordpress 3.0.6Wordpress Wordpress 3.2Wordpress Wordpress 3.3Wordpress Wordpress 3.4.1Wordpress Wordpress 3.5.0
NA
CVE-2013-2705
Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin prior to 3.6 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that change plugin settings.
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.3.1Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.2.9Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.5Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.3Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.1Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.6Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.4Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.2.8Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.2.7Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.8Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.6Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.2.2Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.2Tipsandtricks-hq Wordpress Simple Paypal Shopping CartTipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.4Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.0Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.9Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.8Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.7Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.3.2Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.3.0Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.4
NA
CVE-2015-6535
Cross-site scripting (XSS) vulnerability in includes/options-profiles.php in the YouTube Embed plugin prior to 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field (youtube_embed_name parameter).
Youtube Embed Project Youtube Embed
4.8
CVSSv3
CVE-2022-0994
The Hummingbird WordPress plugin prior to 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Incsub Hummingbird
NA
CVE-2013-3526
Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and previous versions, for WordPress allows remote malicious users to inject arbitrary web script or HTML via the aoid parameter.
Wptrafficanalyzer Trafficanalyzer 3.3.2Wptrafficanalyzer Trafficanalyzer 3.0.1Wptrafficanalyzer Trafficanalyzer 3.0.0Wptrafficanalyzer Trafficanalyzer 2.7.0Wptrafficanalyzer Trafficanalyzer 2.6.0Wptrafficanalyzer Trafficanalyzer 2.2.1Wptrafficanalyzer Trafficanalyzer 2.2.0Wptrafficanalyzer Trafficanalyzer 1.5.0Wptrafficanalyzer Trafficanalyzer 1.4.0Wptrafficanalyzer Trafficanalyzer 1.0.0Wptrafficanalyzer Trafficanalyzer 3.2.1Wptrafficanalyzer Trafficanalyzer 3.2.0Wptrafficanalyzer Trafficanalyzer 3.1.0Wptrafficanalyzer Trafficanalyzer 2.8.2Wptrafficanalyzer Trafficanalyzer 2.8.1Wptrafficanalyzer Trafficanalyzer 2.5.0Wptrafficanalyzer Trafficanalyzer 2.4.1Wptrafficanalyzer Trafficanalyzer 1.8.0Wptrafficanalyzer Trafficanalyzer 1.7.0Wptrafficanalyzer Trafficanalyzer 1.1.3Wptrafficanalyzer Trafficanalyzer 1.1.2Wptrafficanalyzer Trafficanalyzer 3.0.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook