Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

wordpress wordpress 3.1.1 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2

CVE-2022-4905

A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vulnerability affects the function setup_wizard_interface of the file lib/classes/class-settings.php. The manipulation of the argument settings leads to cross sit...
Udx Stateless Media Plugin 3.1.1
4.3
CVSSv2

CVE-2014-6312

Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin prior to 3.2.1 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks ...
Login Widget With Shortcode Project Login Widget With ShortcodeLogin Widget With Shortcode Project Login Widget With Shortcode 1.0.1Login Widget With Shortcode Project Login Widget With Shortcode 2.0.1Login Widget With Shortcode Project Login Widget With Shortcode 2.0.2Login Widget With Shortcode Project Login Widget With Shortcode 2.1.3Login Widget With Shortcode Project Login Widget With Shortcode 2.2.3Login Widget With Shortcode Project Login Widget With Shortcode 2.2.4
4.3
CVSSv2

CVE-2011-3850

Cross-site scripting (XSS) vulnerability in the Atahualpa theme prior to 3.6.8 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Bytesforall AtahualpaBytesforall Atahualpa 2.0Bytesforall Atahualpa 2.01Bytesforall Atahualpa 2.2Bytesforall Atahualpa 2.21Bytesforall Atahualpa 3.1Bytesforall Atahualpa 3.1.1Bytesforall Atahualpa 3.1.2Bytesforall Atahualpa 3.1.3Bytesforall Atahualpa 3.1.4Bytesforall Atahualpa 3.1.5Bytesforall Atahualpa 3.1.6
7.5
CVSSv2

CVE-2011-4671

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions prior to 3.6.8, for WordPress allows remote malicious users to execute arbitrary SQL commands via the track parameter (aka redirect URL).
Adrotateplugin AdrotateAdrotateplugin Adrotate 0.1Adrotateplugin Adrotate 0.2Adrotateplugin Adrotate 0.3Adrotateplugin Adrotate 0.4Adrotateplugin Adrotate 0.5Adrotateplugin Adrotate 0.6Adrotateplugin Adrotate 0.7Adrotateplugin Adrotate 0.7.1Adrotateplugin Adrotate 0.8Adrotateplugin Adrotate 1.0Adrotateplugin Adrotate 2.0
5.1
CVSSv2

CVE-2013-5962

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin prior to 3.3.4 rev40279 for WordPress allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct...
Envato Complete Gallery Manager PluginEnvato Complete Gallery Manager Plugin 1.0.0Envato Complete Gallery Manager Plugin 1.0.1Envato Complete Gallery Manager Plugin 1.0.2Envato Complete Gallery Manager Plugin 2.0.0Envato Complete Gallery Manager Plugin 2.0.1Envato Complete Gallery Manager Plugin 2.0.2Envato Complete Gallery Manager Plugin 2.0.3Envato Complete Gallery Manager Plugin 3.0.0Envato Complete Gallery Manager Plugin 3.0.1Envato Complete Gallery Manager Plugin 3.1.0Envato Complete Gallery Manager Plugin 3.1.1
7.5
CVSSv2

CVE-2013-1852

SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin prior to 3.8.1 for WordPress allows remote malicious users to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.
Kolja Schleich LeaguemanagerKolja Schleich Leaguemanager 1.0Kolja Schleich Leaguemanager 1.1Kolja Schleich Leaguemanager 1.2Kolja Schleich Leaguemanager 1.2.1Kolja Schleich Leaguemanager 1.2.2Kolja Schleich Leaguemanager 1.3Kolja Schleich Leaguemanager 1.4Kolja Schleich Leaguemanager 1.4.1Kolja Schleich Leaguemanager 1.4.2Kolja Schleich Leaguemanager 1.5Kolja Schleich Leaguemanager 2.0
6.8
CVSSv2

CVE-2014-2340

Cross-site request forgery (CSRF) vulnerability in the XCloner plugin prior to 3.1.1 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php.
Xcloner XclonerXcloner Xcloner 2.1Xcloner Xcloner 2.1.2Xcloner Xcloner 2.2.1Xcloner Xcloner 3.0Xcloner Xcloner 3.0.1Xcloner Xcloner 3.0.2Xcloner Xcloner 3.0.3Xcloner Xcloner 3.0.4Xcloner Xcloner 3.0.5Xcloner Xcloner 3.0.6Xcloner Xcloner 3.0.7
4.3
CVSSv2

CVE-2013-1636

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin prior to 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 up to and including 4.2.9 and 4.3.0 u...
Blair Williams Pretty Link LiteBlair Williams Pretty Link Lite 1.6.0Blair Williams Pretty Link Lite 1.6.1Joobi Com Jnews 8.0.1Civicrm Civicrm 3.1.0Civicrm Civicrm 3.1.1Civicrm Civicrm 3.1.2Civicrm Civicrm 3.1.3Civicrm Civicrm 3.1.4Civicrm Civicrm 3.1.5Civicrm Civicrm 3.1.6Civicrm Civicrm 3.2.0
5
CVSSv2

CVE-2012-0896

Absolute path traversal vulnerability in download.php in the Count Per Day module prior to 3.1.1 for WordPress allows remote malicious users to read arbitrary files via the f parameter.
Count Per Day Project Count Per Day 2.2Count Per Day Project Count Per Day 2.15Count Per Day Project Count Per Day 2.15.1Count Per Day Project Count Per Day 2.16Tom Braider Count Per DayTom Braider Count Per Day 1.0
4.3
CVSSv2

CVE-2012-0895

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module prior to 3.1.1 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the map parameter.
Tom Braider Count Per DayTom Braider Count Per Day 1.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectCVE-2024-44852CVE-2024-3400CVE-2024-30129insecure direct object referenceCVE-2024-12115CVE-2024-11220CVE-2024-51378privilege escalation
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook