wordpress vulnerabilities (Bitnami)
67 vulnerabilities.
-
wordpressBitnami WordPress Core Remote File Inclusion Vulnerability 8.1 High -
wordpressBitnami WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A m… 8.8 High -
wordpressBitnami WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution 9.8 Critical -
wordpressBitnami WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query 5.9 Medium -
wordpressBitnami WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST API 4.3 Medium -
wordpressBitnami WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability 5.9 Medium -
wordpressBitnami WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability 4.3 Medium -
wordpressBitnami Mounted Kubernetes Secrets under a predictable path located within the web server document root 10.0 Critical -
wordpressBitnami WordPress Calendar Event Multi View plugin <= 1.4.13 - Broken Access Control vulnerability 3.8 Low -
wordpressBitnami Friends <= 3.2.1 - Missing Authorization 5.3 Medium -
wordpressBitnami WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function 4.9 Medium -
wordpressBitnami YITH Custom Login <= 1.7.3 - Reflected Cross-Site Scripting 6.1 Medium -
wordpressBitnami WordPress Brave plugin <= 0.7.0 - Cross Site Request Forgery (CSRF) vulnerability 4.3 Medium -
wordpressBitnami WordPress core < 6.5.5 - Auth. Arbitrary .html File Read (Windows Only) vulnerability 5.0 Medium -
wordpressBitnami WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability 6.5 Medium -
wordpressBitnami WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API 6.4 Medium -
wordpressBitnami Amen <= 3.3.1 - Admin+ Stored XSS 4.8 Medium -
wordpressBitnami WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability 5.9 Medium -
wordpressBitnami WordPress Calendar Event Multi View plugin <= 1.4.10 - Missing Authorization Leading To Feedback Submission vulnerability 4.3 Medium -
wordpressBitnami MF Gig Calendar <= 1.2.1 - Arbitrary Event Deletion via CSRF 7.5 High -
wordpressBitnami MF Gig Calendar <= 1.2.1 - Editor+ Stored XSS 5.4 Medium -
wordpressBitnami WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar... 7.2 High -
wordpressBitnami WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink 5.3 Medium -
wordpressBitnami Remote Code Execution in `WP_HTML_Token` 5.5 Medium -
wordpressBitnami PHP file upload bypass via Plugin installer 7.7 High -
wordpressBitnami WordPress Brave plugin <= 0.6.5 - Server Side Request Forgery (SSRF) vulnerability 5.4 Medium -
wordpressBitnami WordPress TerraClassifieds plugin <= 2.0.3 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability 8.8 High -
wordpressBitnami WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure 5.3 Medium -
wordpressBitnami WordPress < 6.3.2 is vulnerable to Broken Access Control 4.3 Medium -
wordpressBitnami Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block 6.5 Medium -
wordpressBitnami WordPress Core < 6.2.1 - Directory Traversal 5.4 Medium -
wordpressBitnami WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and... 5.3 Medium -
wordpressBitnami WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding 5.9 Medium -
wordpressBitnami Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote... 5.3 Medium -
wordpressBitnami Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote... 6.1 Medium -
wordpressBitnami Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote... 6.1 Medium -
wordpressBitnami Stored XSS in WordPress 8.0 High -
wordpressBitnami Authenticated Object Injection in Multisites in WordPress 6.6 Medium -
wordpressBitnami SQL injection in WordPress 7.4 High -
wordpressBitnami SQL injection in WordPress 8.0 High -
wordpressBitnami WordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for... 8.1 High -
wordpressBitnami Authenticated cross-site scripting (XSS) in WordPress editor 7.6 High -
wordpressBitnami Information Disclosure in wp_die() via JSONP in wordpress 5.3 Medium -
wordpressBitnami Object injection in PHPMailer/PHPMailer 9.8 Critical -
wordpressBitnami WordPress Authenticated disclosure of password-protected posts and pages 6.5 Medium -
wordpressBitnami WordPress Authenticated XXE attack when installation is running PHP 8 7.1 High -
wordpressBitnami WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility... 9.8 Critical -
wordpressBitnami WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as... 7.5 High -
wordpressBitnami WordPress before 5.5.2 allows XSS associated with global variables. 6.1 Medium -
wordpressBitnami wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain... 9.8 Critical - Show olderLoading…