Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

wordpress vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2011-4957

The make_clickable function in wp-includes/formatting.php in WordPress prior to 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote malicious users to cause a denial of service (crash) via a comment with a crafted URL that triggers many...
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.8.5.2Wordpress Wordpress 1.2.3Wordpress Wordpress 2.0.11Wordpress Wordpress 1.3.3Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2.4Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1Wordpress Wordpress 2.1.3Wordpress Wordpress 1.3.2
NA

CVE-2011-4898

wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and previous versions generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote malicious users to co...
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.0.11Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 3.2.1Wordpress Wordpress 0.711Wordpress Wordpress 3.1.4Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1Wordpress Wordpress 0.7Wordpress Wordpress 2.1.3Wordpress Wordpress 3.0Wordpress Wordpress 2.8
NA

CVE-2011-4899

wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and previous versions does not ensure that the specified MySQL database service is appropriate, which allows remote malicious users to configure an arbitrary database via the dbhost and dbname parameters, ...
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.0.11Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 3.2.1Wordpress Wordpress 0.711Wordpress Wordpress 3.1.4Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1Wordpress Wordpress 0.7Wordpress Wordpress 2.1.3Wordpress Wordpress 3.0Wordpress Wordpress 2.8
NA

CVE-2012-2399

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and previous versions, as used in WordPress prior to 3.5.2, TinyMCE Image Manager 1.1 and previous versions, and other products allows remote malicious users to inject arbitrary web script or HTML via ...
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.8.5.2Wordpress Wordpress 1.2.3Wordpress Wordpress 2.0.11Wordpress Wordpress 1.3.3Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2.4Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1Wordpress Wordpress 2.1.3Wordpress Wordpress 1.3.2
NA

CVE-2012-2400

Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress prior to 3.3.2 has unknown impact and attack vectors.
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.8.5.2Wordpress Wordpress 1.2.3Wordpress Wordpress 2.0.11Wordpress Wordpress 1.3.3Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2.4Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1Wordpress Wordpress 2.1.3Wordpress Wordpress 1.3.2
NA

CVE-2012-2402

wp-admin/plugins.php in WordPress prior to 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors.
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.8.5.2Wordpress Wordpress 1.2.3Wordpress Wordpress 2.0.11Wordpress Wordpress 1.3.3Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2.4Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1Wordpress Wordpress 2.1.3Wordpress Wordpress 1.3.2
NA

CVE-2012-2403

wp-includes/formatting.php in WordPress prior to 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote malicious users to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.8.5.2Wordpress Wordpress 1.2.3Wordpress Wordpress 2.0.11Wordpress Wordpress 1.3.3Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2.4Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1Wordpress Wordpress 2.1.3Wordpress Wordpress 1.3.2
NA

CVE-2012-2404

wp-comments-post.php in WordPress prior to 3.3.2 supports offsite redirects, which makes it easier for remote malicious users to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.8.5.2Wordpress Wordpress 1.2.3Wordpress Wordpress 2.0.11Wordpress Wordpress 1.3.3Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2.4Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1Wordpress Wordpress 2.1.3Wordpress Wordpress 1.3.2
NA

CVE-2012-3385

WordPress prior to 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors.
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.8.5.2Wordpress Wordpress 1.2.3Wordpress Wordpress 2.0.11Wordpress Wordpress 1.3.3Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2.4Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 3.2.1Wordpress Wordpress 3.1.4Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1
NA

CVE-2012-3384

Cross-site request forgery (CSRF) vulnerability in the customizer in WordPress prior to 3.4.1 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Wordpress Wordpress 3.0.5Wordpress Wordpress 2.8.5.2Wordpress Wordpress 1.2.3Wordpress Wordpress 2.0.11Wordpress Wordpress 1.3.3Wordpress Wordpress 2.8.6Wordpress Wordpress 2.0Wordpress Wordpress 2.1.1Wordpress Wordpress 2.2.3Wordpress Wordpress 2.0.2Wordpress Wordpress 2.1Wordpress Wordpress 1.1.1Wordpress Wordpress 1.2.4Wordpress Wordpress 2.0.6Wordpress Wordpress 2.0.1Wordpress Wordpress 2.8.4Wordpress Wordpress 2.0.4Wordpress Wordpress 3.0.2Wordpress Wordpress 3.2.1Wordpress Wordpress 3.1.4Wordpress Wordpress 2.2Wordpress Wordpress 1.2.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
adobeCVE-2024-9201CVE-2024-9680CVE-2024-9808CVE-2024-9794dosremote attackerscommerceCVE-2024-45129overflowCVE-2024-43572
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook