Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

wordpress wordpress 3.1.1 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2014-6312

Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin prior to 3.2.1 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks ...
Login Widget With Shortcode Project Login Widget With Shortcode 1.0.1Login Widget With Shortcode Project Login Widget With Shortcode 2.1.3Login Widget With Shortcode Project Login Widget With ShortcodeLogin Widget With Shortcode Project Login Widget With Shortcode 2.2.3Login Widget With Shortcode Project Login Widget With Shortcode 2.0.1Login Widget With Shortcode Project Login Widget With Shortcode 2.2.4Login Widget With Shortcode Project Login Widget With Shortcode 2.0.2
6.1
CVSSv3

CVE-2022-4905

A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vulnerability affects the function setup_wizard_interface of the file lib/classes/class-settings.php. The manipulation of the argument settings leads to cross sit...
Udx Stateless Media Plugin 3.1.1
NA

CVE-2011-4671

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions prior to 3.6.8, for WordPress allows remote malicious users to execute arbitrary SQL commands via the track parameter (aka redirect URL).
Adrotateplugin AdrotateAdrotateplugin Adrotate 0.1Adrotateplugin Adrotate 0.2Adrotateplugin Adrotate 0.3Adrotateplugin Adrotate 0.4Adrotateplugin Adrotate 0.5Adrotateplugin Adrotate 0.6Adrotateplugin Adrotate 0.7Adrotateplugin Adrotate 0.7.1Adrotateplugin Adrotate 0.8Adrotateplugin Adrotate 1.0Adrotateplugin Adrotate 2.0Adrotateplugin Adrotate 2.0.1Adrotateplugin Adrotate 2.1Adrotateplugin Adrotate 2.2Adrotateplugin Adrotate 2.3Adrotateplugin Adrotate 2.3.1Adrotateplugin Adrotate 2.4Adrotateplugin Adrotate 2.4.1Adrotateplugin Adrotate 2.4.2Adrotateplugin Adrotate 2.4.3Adrotateplugin Adrotate 2.4.4
NA

CVE-2011-3850

Cross-site scripting (XSS) vulnerability in the Atahualpa theme prior to 3.6.8 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Bytesforall AtahualpaBytesforall Atahualpa 2.0Bytesforall Atahualpa 2.01Bytesforall Atahualpa 2.2Bytesforall Atahualpa 2.21Bytesforall Atahualpa 3.1Bytesforall Atahualpa 3.1.1Bytesforall Atahualpa 3.1.2Bytesforall Atahualpa 3.1.3Bytesforall Atahualpa 3.1.4Bytesforall Atahualpa 3.1.5Bytesforall Atahualpa 3.1.6Bytesforall Atahualpa 3.1.8Bytesforall Atahualpa 3.1.9Bytesforall Atahualpa 3.2Bytesforall Atahualpa 3.4Bytesforall Atahualpa 3.4.01Bytesforall Atahualpa 3.4.1Bytesforall Atahualpa 3.4.3Bytesforall Atahualpa 3.4.4Bytesforall Atahualpa 3.4.5Bytesforall Atahualpa 3.4.6
NA

CVE-2014-2340

Cross-site request forgery (CSRF) vulnerability in the XCloner plugin prior to 3.1.1 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php.
Xcloner Xcloner 3.0.8Xcloner Xcloner 3.0.1Xcloner Xcloner 3.0.4Xcloner Xcloner 2.1Xcloner Xcloner 3.0Xcloner Xcloner 3.0.3Xcloner Xcloner 3.0.5Xcloner Xcloner 3.0.7Xcloner Xcloner 2.2.1Xcloner Xcloner 2.1.2Xcloner XclonerXcloner Xcloner 3.0.2Xcloner Xcloner 3.0.6
NA

CVE-2013-1852

SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin prior to 3.8.1 for WordPress allows remote malicious users to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.
Kolja Schleich Leaguemanager 3.6.8Kolja Schleich Leaguemanager 3.6.7Kolja Schleich Leaguemanager 3.4.1Kolja Schleich Leaguemanager 3.6.9Kolja Schleich Leaguemanager 1.2.2Kolja Schleich Leaguemanager 3.0.3Kolja Schleich Leaguemanager 3.5.1Kolja Schleich Leaguemanager 3.7Kolja Schleich Leaguemanager 2.2Kolja Schleich Leaguemanager 3.2Kolja Schleich Leaguemanager 3.5.6Kolja Schleich Leaguemanager 3.0.2Kolja Schleich Leaguemanager 1.4.2Kolja Schleich Leaguemanager 2.5.2Kolja Schleich LeaguemanagerKolja Schleich Leaguemanager 3.5Kolja Schleich Leaguemanager 2.9.2Kolja Schleich Leaguemanager 3.5.2Kolja Schleich Leaguemanager 3.6.2Kolja Schleich Leaguemanager 3.1.9Kolja Schleich Leaguemanager 3.0.1Kolja Schleich Leaguemanager 1.3
NA

CVE-2012-0896

Absolute path traversal vulnerability in download.php in the Count Per Day module prior to 3.1.1 for WordPress allows remote malicious users to read arbitrary files via the f parameter.
Count Per Day Project Count Per Day 2.2Count Per Day Project Count Per Day 2.15Count Per Day Project Count Per Day 2.15.1Count Per Day Project Count Per Day 2.16Tom Braider Count Per DayTom Braider Count Per Day 1.0
NA

CVE-2012-0895

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module prior to 3.1.1 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the map parameter.
Tom Braider Count Per DayTom Braider Count Per Day 1.0
NA

CVE-2013-5962

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin prior to 3.3.4 rev40279 for WordPress allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct...
Envato Complete Gallery Manager Plugin 3.2.4Envato Complete Gallery Manager Plugin 3.1.1Envato Complete Gallery Manager Plugin 1.0.2Envato Complete Gallery Manager Plugin 3.0.0Envato Complete Gallery Manager Plugin 3.2.6Envato Complete Gallery Manager Plugin 3.3.1Envato Complete Gallery Manager PluginEnvato Complete Gallery Manager Plugin 2.0.1Envato Complete Gallery Manager Plugin 2.0.0Envato Complete Gallery Manager Plugin 3.2.3Envato Complete Gallery Manager Plugin 1.0.0Envato Complete Gallery Manager Plugin 3.3.0Envato Complete Gallery Manager Plugin 3.2.0Envato Complete Gallery Manager Plugin 3.3.2Envato Complete Gallery Manager Plugin 3.2.5Envato Complete Gallery Manager Plugin 3.1.0Envato Complete Gallery Manager Plugin 3.2.8Envato Complete Gallery Manager Plugin 3.2.7Envato Complete Gallery Manager Plugin 3.0.1Envato Complete Gallery Manager Plugin 2.0.3Envato Complete Gallery Manager Plugin 1.0.1Envato Complete Gallery Manager Plugin 2.0.2
NA

CVE-2013-1636

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin prior to 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 up to and including 4.2.9 and 4.3.0 u...
Blair Williams Pretty Link Lite 1.6.1Blair Williams Pretty Link Lite 1.6.0Blair Williams Pretty Link LiteJoobi Com Jnews 8.0.1Civicrm Civicrm 3.1.3Civicrm Civicrm 4.2.5Civicrm Civicrm 3.1.0Civicrm Civicrm 4.1.2Civicrm Civicrm 4.3.1Civicrm Civicrm 4.1.4Civicrm Civicrm 4.2.8Civicrm Civicrm 4.1.1Civicrm Civicrm 4.2.7Civicrm Civicrm 3.4.0Civicrm Civicrm 4.3.0Civicrm Civicrm 3.3.1Civicrm Civicrm 3.1.1Civicrm Civicrm 3.3.0Civicrm Civicrm 3.2.4Civicrm Civicrm 3.2.1Civicrm Civicrm 3.2.3Civicrm Civicrm 3.3.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-20017administrator privilegesCVE-2024-36401CVE-2024-8521CVE-2024-8247event management systemCVE-2024-45098aspera faspexremote attackersXSSmindsdbangeljudesuarezCVE-2024-45157
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook