Vulmon Recent Vulnerabilities Trends Blog About Contact

wordpress vulnerabilities and exploits

(subscribe to this query)

10
CVSSv2
CVE-2011-3122
Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Media security."...
Wordpress Wordpress 3.1Wordpress Wordpress 3.1.1Wordpress Wordpress 3.1.2Wordpress Wordpress 3.2
6.8
CVSSv2
CVE-2014-9033
Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote attackers to hijack the authentication of arbitrary users for requests that reset passwords....
Wordpress Wordpress 3.7.4Wordpress Wordpress 3.8.4Wordpress Wordpress 3.9.2Wordpress Wordpress 4.0
10
CVSSv2
CVE-2006-4028
Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. NOTE: due to lack of details, it is not clear how these issues are different from CVE-2006-3389 and CVE-2006-3390, although it is likely that 2.0.4 addresses an...
Wordpress Wordpress 2.0Wordpress Wordpress 2.0.1Wordpress Wordpress 2.0.2Wordpress Wordpress 2.0.3
5.8
CVSSv2
CVE-2011-3127
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site....
Wordpress Wordpress 3.1Wordpress Wordpress 3.1.1Wordpress Wordpress 3.1.2Wordpress Wordpress 3.2
5
CVSSv2
CVE-2011-3128
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php....
Wordpress Wordpress 3.1Wordpress Wordpress 3.1.1Wordpress Wordpress 3.1.2Wordpress Wordpress 3.2
10
CVSSv2
CVE-2011-3125
Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Various security hardening."...
Wordpress Wordpress 3.1Wordpress Wordpress 3.1.1Wordpress Wordpress 3.1.2Wordpress Wordpress 3.2
6.5
CVSSv2
CVE-2007-1897
SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users to execute arbitrary SQL commands via a string parameter value in an XML RPC mt.setPostCategories method call, related to the post_id variable....
Wordpress Wordpress 2.1Wordpress Wordpress 2.1.1Wordpress Wordpress
6
CVSSv2
CVE-2006-5705
Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the (1) backup and (2) fragment parameters in a GET request....
Wordpress Wordpress 2.0.2Wordpress Wordpress 2.0.3Wordpress Wordpress
4.3
CVSSv2
CVE-2013-2201
Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) uploads of media files, (2) editing of media files, (3) installation of plugins, (4) updates to plugins, (5)...
Wordpress Wordpress 0.71Wordpress Wordpress 1.0Wordpress Wordpress 1.0.1Wordpress Wordpress 1.0.2Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2Wordpress Wordpress 1.2.1Wordpress Wordpress 1.2.2Wordpress Wordpress 1.2.3Wordpress Wordpress 1.2.4Wordpress Wordpress 1.2.5Wordpress Wordpress 1.3Wordpress Wordpress 1.3.2Wordpress Wordpress 1.3.3Wordpress Wordpress 1.5Wordpress Wordpress 1.5.1Wordpress Wordpress 1.5.1.1Wordpress Wordpress 1.5.1.2Wordpress Wordpress 1.5.1.3Wordpress Wordpress 1.5.2Wordpress Wordpress 1.6.2Wordpress Wordpress 2.0Wordpress Wordpress 2.0.1Wordpress Wordpress 2.0.2Wordpress Wordpress 2.0.4Wordpress Wordpress 2.0.5Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.7Wordpress Wordpress 2.0.8Wordpress Wordpress 2.0.9Wordpress Wordpress 2.0.10Wordpress Wordpress 2.0.11Wordpress Wordpress 2.1Wordpress Wordpress 2.1.1Wordpress Wordpress 2.1.2Wordpress Wordpress 2.1.3Wordpress Wordpress 2.2Wordpress Wordpress 2.2.1Wordpress Wordpress 2.2.2Wordpress Wordpress 2.2.3Wordpress Wordpress 2.3Wordpress Wordpress 2.3.1Wordpress Wordpress 2.3.2Wordpress Wordpress 2.3.3Wordpress Wordpress 2.5Wordpress Wordpress 2.5.1Wordpress Wordpress 2.6Wordpress Wordpress 2.6.1Wordpress Wordpress 2.6.2Wordpress Wordpress 2.6.3Wordpress Wordpress 2.6.5Wordpress Wordpress 2.7Wordpress Wordpress 2.7.1Wordpress Wordpress 2.8Wordpress Wordpress 2.8.1Wordpress Wordpress 2.8.2Wordpress Wordpress 2.8.3Wordpress Wordpress 2.8.4Wordpress Wordpress 2.8.5Wordpress Wordpress 2.8.5.1Wordpress Wordpress 2.8.5.2Wordpress Wordpress 2.8.6Wordpress Wordpress 2.9Wordpress Wordpress 2.9.1Wordpress Wordpress 2.9.1.1Wordpress Wordpress 2.9.2Wordpress Wordpress 3.3Wordpress Wordpress 3.3.1Wordpress Wordpress 3.3.2Wordpress Wordpress 3.3.3Wordpress Wordpress 3.4.0Wordpress Wordpress 3.4.1Wordpress Wordpress 3.4.2Wordpress Wordpress 3.5.0Wordpress Wordpress
4.3
CVSSv2
CVE-2013-2199
The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery (SSRF) issue, a similar vulnerability to CVE-2013-0235....
Wordpress Wordpress 0.71Wordpress Wordpress 1.0Wordpress Wordpress 1.0.1Wordpress Wordpress 1.0.2Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2Wordpress Wordpress 1.2.1Wordpress Wordpress 1.2.2Wordpress Wordpress 1.2.3Wordpress Wordpress 1.2.4Wordpress Wordpress 1.2.5Wordpress Wordpress 1.3Wordpress Wordpress 1.3.2Wordpress Wordpress 1.3.3Wordpress Wordpress 1.5Wordpress Wordpress 1.5.1Wordpress Wordpress 1.5.1.1Wordpress Wordpress 1.5.1.2Wordpress Wordpress 1.5.1.3Wordpress Wordpress 1.5.2Wordpress Wordpress 1.6.2Wordpress Wordpress 2.0Wordpress Wordpress 2.0.1Wordpress Wordpress 2.0.2Wordpress Wordpress 2.0.4Wordpress Wordpress 2.0.5Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.7Wordpress Wordpress 2.0.8Wordpress Wordpress 2.0.9Wordpress Wordpress 2.0.10Wordpress Wordpress 2.0.11Wordpress Wordpress 2.1Wordpress Wordpress 2.1.1Wordpress Wordpress 2.1.2Wordpress Wordpress 2.1.3Wordpress Wordpress 2.2Wordpress Wordpress 2.2.1Wordpress Wordpress 2.2.2Wordpress Wordpress 2.2.3Wordpress Wordpress 2.3Wordpress Wordpress 2.3.1Wordpress Wordpress 2.3.2Wordpress Wordpress 2.3.3Wordpress Wordpress 2.5Wordpress Wordpress 2.5.1Wordpress Wordpress 2.6Wordpress Wordpress 2.6.1Wordpress Wordpress 2.6.2Wordpress Wordpress 2.6.3Wordpress Wordpress 2.6.5Wordpress Wordpress 2.7Wordpress Wordpress 2.7.1Wordpress Wordpress 2.8Wordpress Wordpress 2.8.1Wordpress Wordpress 2.8.2Wordpress Wordpress 2.8.3Wordpress Wordpress 2.8.4Wordpress Wordpress 2.8.5Wordpress Wordpress 2.8.5.1Wordpress Wordpress 2.8.5.2Wordpress Wordpress 2.8.6Wordpress Wordpress 2.9Wordpress Wordpress 2.9.1Wordpress Wordpress 2.9.1.1Wordpress Wordpress 2.9.2Wordpress Wordpress 3.3Wordpress Wordpress 3.3.1Wordpress Wordpress 3.3.2Wordpress Wordpress 3.3.3Wordpress Wordpress 3.4.0Wordpress Wordpress 3.4.1Wordpress Wordpress 3.4.2Wordpress Wordpress 3.5.0Wordpress Wordpress
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-6207CVE-2020-11143CVE-2021-3129CVE-2020-11138CVE-2020-11225man-in-the-middledeserializationfile uploadCVE-2020-26285