Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

wordpress wordpress 2.3.1 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2

CVE-2014-0165

WordPress prior to 3.7.2 and 3.8.x prior to 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php.
Wordpress WordpressWordpress Wordpress 0.71Wordpress Wordpress 1.0Wordpress Wordpress 1.0.1Wordpress Wordpress 1.0.2Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2Wordpress Wordpress 1.2.1Wordpress Wordpress 1.2.2Wordpress Wordpress 1.2.3Wordpress Wordpress 1.2.4Wordpress Wordpress 1.2.5
6.4
CVSSv2

CVE-2014-0166

The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress prior to 3.7.2 and 3.8.x prior to 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote malicious users to obtain access via a forged cookie.
Wordpress WordpressWordpress Wordpress 0.71Wordpress Wordpress 1.0Wordpress Wordpress 1.0.1Wordpress Wordpress 1.0.2Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2Wordpress Wordpress 1.2.1Wordpress Wordpress 1.2.2Wordpress Wordpress 1.2.3Wordpress Wordpress 1.2.4Wordpress Wordpress 1.2.5
4.9
CVSSv2

CVE-2009-2334

wp-admin/admin.php in WordPress and WordPress MU prior to 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote malicious users to specify a configuration file in the page parameter to obtain sensitive information or mod...
Wordpress WordpressWordpress Wordpress 0.6.2Wordpress Wordpress 0.6.2.1Wordpress Wordpress 0.7Wordpress Wordpress 0.71Wordpress Wordpress 0.71-goldWordpress Wordpress 0.72Wordpress Wordpress 0.711Wordpress Wordpress 1.0Wordpress Wordpress 1.0-platinumWordpress Wordpress 1.0.1Wordpress Wordpress 1.0.1-miles
5
CVSSv2

CVE-2009-2432

WordPress and WordPress MU prior to 2.8.1 allow remote malicious users to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message.
Wordpress WordpressWordpress Wordpress 0.6.2Wordpress Wordpress 0.6.2.1Wordpress Wordpress 0.7Wordpress Wordpress 0.71Wordpress Wordpress 0.71-goldWordpress Wordpress 0.72Wordpress Wordpress 0.711Wordpress Wordpress 1.0Wordpress Wordpress 1.0-platinumWordpress Wordpress 1.0.1Wordpress Wordpress 1.0.1-miles
5
CVSSv2

CVE-2014-8585

Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote malicious users to read arbitrary files via a .. (dot dot) in the fname parameter to (1) views/file_download.php or (2) file_download.php.
Wpdownloadmanager Wordpress Download Manager 1.1Wpdownloadmanager Wordpress Download Manager 1.2Wpdownloadmanager Wordpress Download Manager 1.2.1Wpdownloadmanager Wordpress Download Manager 1.2.2Wpdownloadmanager Wordpress Download Manager 1.2.3Wpdownloadmanager Wordpress Download Manager 1.2.4Wpdownloadmanager Wordpress Download Manager 1.2.5Wpdownloadmanager Wordpress Download Manager 1.3Wpdownloadmanager Wordpress Download Manager 1.4Wpdownloadmanager Wordpress Download Manager 1.5Wpdownloadmanager Wordpress Download Manager 1.5.1Wpdownloadmanager Wordpress Download Manager 1.5.2
6.8
CVSSv2

CVE-2007-6013

Wordpress 1.5 up to and including 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows malicious users to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.
Wordpress WordpressFedoraproject Fedora 7Fedoraproject Fedora 8
9.8
CVSSv3

CVE-2022-45370

Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments Import & Export: from n/a up to and including 2.3.1.
Webtoffee Wordpress Comments Import And Export
4.3
CVSSv2

CVE-2013-4117

Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the ID parameter.
Anshul Sharma Category-grid-view-gallery 2.3.1
7.5
CVSSv2

CVE-2011-4671

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions prior to 3.6.8, for WordPress allows remote malicious users to execute arbitrary SQL commands via the track parameter (aka redirect URL).
Adrotateplugin AdrotateAdrotateplugin Adrotate 0.1Adrotateplugin Adrotate 0.2Adrotateplugin Adrotate 0.3Adrotateplugin Adrotate 0.4Adrotateplugin Adrotate 0.5Adrotateplugin Adrotate 0.6Adrotateplugin Adrotate 0.7Adrotateplugin Adrotate 0.7.1Adrotateplugin Adrotate 0.8Adrotateplugin Adrotate 1.0Adrotateplugin Adrotate 2.0
5
CVSSv2

CVE-2012-6112

classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon prior to 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x prior to 2.1.10, 2.2.x prior to 2.2.7, 2.3.x prior to 2.3.4, and 2.4.x prior to 2.4.1 and other products, does not properly handle control charact...
Tinymce Spellchecker Php 2.0Tinymce Spellchecker Php 2.0.1Tinymce Spellchecker Php 2.0.2Tinymce Spellchecker Php 2.0.3Tinymce Spellchecker Php 2.0.6Moodle Moodle 2.1.0Moodle Moodle 2.1.1Moodle Moodle 2.1.2Moodle Moodle 2.1.3Moodle Moodle 2.1.4Moodle Moodle 2.1.5Moodle Moodle 2.1.6
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-0575CVE-2024-55591CVE-2024-41742com.transsion.carlcareCVE-2024-57926code injectionCVE-2024-12365tendainsecure direct object referenceCVE-2024-13433tduck-platformcode-projectsXML injection
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook