Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 2.7 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-0173
The Jetpack plugin prior to 1.9 prior to 1.9.4, 2.0.x prior to 2.0.9, 2.1.x prior to 2.1.4, 2.2.x prior to 2.2.7, 2.3.x prior to 2.3.7, 2.4.x prior to 2.4.4, 2.5.x prior to 2.5.2, 2.6.x prior to 2.6.3, 2.7.x prior to 2.7.2, 2.8.x prior to 2.8.2, and 2.9.x prior to 2.9.3 for WordP...
Automattic Jetpack 2.6Automattic Jetpack 2.5Automattic Jetpack 2.3.2Automattic Jetpack 2.3.1Automattic Jetpack 2.2Automattic Jetpack 2.1.2Automattic Jetpack 1.9.2Automattic Jetpack 1.9.1Automattic Jetpack 2.9.1Automattic Jetpack 2.9Automattic Jetpack 2.8Automattic Jetpack 2.4Automattic Jetpack 2.3.5Automattic Jetpack 2.2.4Automattic Jetpack 2.2.3Automattic Jetpack 2.0.4Automattic Jetpack 2.0.3Automattic Jetpack 2.0.2Automattic Jetpack 2.7Automattic Jetpack 2.6.1Automattic Jetpack 2.3.4Automattic Jetpack 2.3.3
8.8
CVSSv3
CVE-2022-37411
Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza's Captcha Code plugin <= 2.7 at WordPress.
Captcha Code Project Captcha Code
6.1
CVSSv3
CVE-2016-10990
The wp-cerber plugin prior to 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.
Wpcerber Cerber Security Antispam \\& Malware Scan
4.8
CVSSv3
CVE-2022-3539
The Testimonials WordPress plugin prior to 2.7, super-testimonial-pro WordPress plugin prior to 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowe...
Themepoints TestimonialsThemepoints Testimonials Pro
8.8
CVSSv3
CVE-2015-9454
The smooth-slider plugin prior to 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id parameter.
Slidervilla Smooth Slider
5.7
CVSSv3
CVE-2021-24752
Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin prior to 1.9, To Top WordPress plugin prior to 2.3,...
Catchplugins Catch Scroll Progress BarCatchplugins Catch Sticky MenuCatchplugins Catch Themes Demo ImportCatchplugins Catch Under ConstructionCatchplugins Catch Web ToolsCatchplugins Essential Content TypesCatchplugins Generate Child ThemeCatchplugins Header EnhancementCatchplugins To TopCatchplugins Essential Widgets
NA
CVE-2014-9177
The HTML5 MP3 Player with Playlist Free plugin prior to 2.7 for WordPress allows remote malicious users to obtain the installation path via a request to html5plus/playlist.php.
Svnlabs Html5 Mp3 Player With Playlist Free
NA
CVE-2024-1956
The wpb-show-core WordPress plugin prior to 2.7 does not sanitise and escape the parameters before outputting it back in the response of an unauthenticated request, leading to a Reflected Cross-Site Scripting
NA
CVE-2024-1292
The WPB Show Core WordPress plugin prior to 2.7 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
NA
CVE-2024-1958
The WPB Show Core WordPress plugin prior to 2.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or unauthenticated users
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook