Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 2.3 vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2014-0173
The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2, 2.6.x before 2.6.3, 2.7.x before 2.7.2, 2.8.x before 2.8.2, and 2.9.x before 2.9.3 for WordPress does not properly...
Automattic Jetpack 2.6Automattic Jetpack 2.5Automattic Jetpack 2.3.2Automattic Jetpack 2.3.1Automattic Jetpack 2.2Automattic Jetpack 2.1.2Automattic Jetpack 1.9.2Automattic Jetpack 1.9.1Automattic Jetpack 2.9.1Automattic Jetpack 2.9Automattic Jetpack 2.8Automattic Jetpack 2.4Automattic Jetpack 2.3.5Automattic Jetpack 2.2.4Automattic Jetpack 2.2.3Automattic Jetpack 2.0.4Automattic Jetpack 2.0.3Automattic Jetpack 2.0.2Automattic Jetpack 2.7Automattic Jetpack 2.6.1Automattic Jetpack 2.3.4Automattic Jetpack 2.3.3Automattic Jetpack 2.2.2Automattic Jetpack 2.2.1Automattic Jetpack 2.0.1Automattic Jetpack 2.0Automattic Jetpack 2.9.3Automattic Jetpack 2.9.2Automattic Jetpack 2.4.2Automattic Jetpack 2.4.1Automattic Jetpack 2.3Automattic Jetpack 2.2.5Automattic Jetpack 2.1.1Automattic Jetpack 2.1Automattic Jetpack 1.9
7.5
CVSSv3
CVE-2015-9406
Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files parameter to css/css.php....
Mtheme-unus Project Mtheme-unus
8.8
CVSSv3
CVE-2021-24755
The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user...
Mycred Mycred
NA
CVE-2014-4518
Cross-site scripting (XSS) vulnerability in xd_resize.php in the Contact Form by ContactMe.com plugin 2.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the width parameter....
D-coda Contactme
NA
CVE-2014-4726
Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.8 for WordPress has unspecified impact and attack vectors....
Mailpoet Mailpoet Newsletters 2.6.4Mailpoet Mailpoet Newsletters 2.6.2Mailpoet Mailpoet Newsletters 2.5.9.1Mailpoet Mailpoet Newsletters 2.5.8Mailpoet Mailpoet Newsletters 2.5Mailpoet Mailpoet Newsletters 2.4.3Mailpoet Mailpoet Newsletters 2.3.4Mailpoet Mailpoet Newsletters 2.3.2Mailpoet Mailpoet Newsletters 2.1.9Mailpoet Mailpoet Newsletters 2.1.7Mailpoet Mailpoet Newsletters 2.1Mailpoet Mailpoet Newsletters 2.0.9Mailpoet Mailpoet Newsletters 2.0.4Mailpoet Mailpoet Newsletters 2.0.2Mailpoet Mailpoet Newsletters 1.1.1Mailpoet Mailpoet Newsletters 1.0.1Mailpoet Mailpoet NewslettersMailpoet Mailpoet Newsletters 2.6.6Mailpoet Mailpoet Newsletters 2.6.5Mailpoet Mailpoet Newsletters 2.5.7Mailpoet Mailpoet Newsletters 2.5.5Mailpoet Mailpoet Newsletters 2.5.4Mailpoet Mailpoet Newsletters 2.5.3Mailpoet Mailpoet Newsletters 2.5.2Mailpoet Mailpoet Newsletters 2.3Mailpoet Mailpoet Newsletters 2.2.3Mailpoet Mailpoet Newsletters 2.2.2Mailpoet Mailpoet Newsletters 2.2.1Mailpoet Mailpoet Newsletters 2.0.8Mailpoet Mailpoet Newsletters 2.0.7Mailpoet Mailpoet Newsletters 2.0.6Mailpoet Mailpoet Newsletters 2.0.5Mailpoet Mailpoet Newsletters 0.9.6Mailpoet Mailpoet Newsletters 0.9.2Mailpoet Mailpoet Newsletters 0.9.1Mailpoet Mailpoet Newsletters 0.9Mailpoet Mailpoet Newsletters 2.6Mailpoet Mailpoet Newsletters 2.5.9.4Mailpoet Mailpoet Newsletters 2.5.9.3Mailpoet Mailpoet Newsletters 2.4.2Mailpoet Mailpoet Newsletters 2.4.1Mailpoet Mailpoet Newsletters 2.4Mailpoet Mailpoet Newsletters 2.3.5Mailpoet Mailpoet Newsletters 2.1.5Mailpoet Mailpoet Newsletters 2.1.4Mailpoet Mailpoet Newsletters 2.1.3Mailpoet Mailpoet Newsletters 2.1.2Mailpoet Mailpoet Newsletters 2.0Mailpoet Mailpoet Newsletters 1.1.5Mailpoet Mailpoet Newsletters 1.1.4Mailpoet Mailpoet Newsletters 1.1.3Mailpoet Mailpoet Newsletters 2.6.3Mailpoet Mailpoet Newsletters 2.6.1Mailpoet Mailpoet Newsletters 2.5.9.2Mailpoet Mailpoet Newsletters 2.5.9Mailpoet Mailpoet Newsletters 2.5.1Mailpoet Mailpoet Newsletters 2.4.4Mailpoet Mailpoet Newsletters 2.3.3Mailpoet Mailpoet Newsletters 2.3.1Mailpoet Mailpoet Newsletters 2.2Mailpoet Mailpoet Newsletters 2.1.8Mailpoet Mailpoet Newsletters 2.1.6Mailpoet Mailpoet Newsletters 2.1.1Mailpoet Mailpoet Newsletters 2.0.9.5Mailpoet Mailpoet Newsletters 2.0.3Mailpoet Mailpoet Newsletters 2.0.1Mailpoet Mailpoet Newsletters 1.1.2Mailpoet Mailpoet Newsletters 1.1Mailpoet Mailpoet Newsletters 1.0
9.8
CVE-2020-36718
The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3 via deserialization of untrusted input "njt_gdpr_allow_permissions" value. This allows unauthenticated attackers to inject a PHP Object....
Ninjateam Gpdr Ccpa Compliance Support
4.8
CVSSv3
CVE-2021-24592
The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed...
Yoohooplugins Sitewide Notice
NA
CVE-2015-5482
Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include and execute arbitrary local files via a .. (dot dot) in the tab parameter in the gdbbpress_attachments page to wp-admin/edit.php....
Dev4press Gd Bbpress Attachments
NA
CVE-2015-5481
Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter in the gdbbpress_attachments page to wp-admin/edit.php....
Dev4press Gd Bbpress Attachments
6.1
CVE-2022-3415
The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unauthenticated attackers to set Stored Cross-Site Scripting payloads in them, which will trigger when an admin view the related contact message...
Bluecoral Chat Bubble
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-5172CVE-2023-44023CVE-2023-30845elevation of privilegeinjectionCVE-2023-43234CVE-2023-41991cross-site request forgeryseacmsCVE-2023-5197
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook