wordpress vulnerabilities (Debian)
361 vulnerabilities.
-
wordpressDebian WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability 6.9 Medium -
wordpressDebian WordPress Core Remote File Inclusion Vulnerability 8.1 High -
wordpressDebian WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability 7.1 High -
wordpressDebian WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A m… 8.8 High -
wordpressDebian WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escala… 8.9 High -
wordpressDebian WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution 9.8 Critical -
wordpressDebian WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query 5.9 Medium -
wordpressDebian WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST API 4.3 Medium -
wordpressDebian WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability 5.9 Medium -
wordpressDebian WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability 4.3 Medium -
wordpressDebian WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts... 3.7 Low -
wordpressDebian WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function 4.9 Medium -
wordpressDebian WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability 6.5 Medium -
wordpressDebian WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API 6.4 Medium -
wordpressDebian WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar... 7.2 High -
wordpressDebian WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink 5.3 Medium -
wordpressDebian Remote Code Execution in `WP_HTML_Token` 5.5 Medium -
wordpressDebian PHP file upload bypass via Plugin installer 7.7 High -
wordpressDebian wordpress - security update No score -
wordpressDebian WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure 5.3 Medium -
wordpressDebian WordPress < 6.3.2 is vulnerable to Broken Access Control 4.3 Medium -
wordpressDebian Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block 6.5 Medium -
wordpressDebian WordPress Core < 6.2.1 - Directory Traversal 5.4 Medium -
wordpressDebian WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding 5.9 Medium -
wordpressDebian wordpress - security update No score -
wordpressDebian Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote... 5.3 Medium -
wordpressDebian Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote... 6.1 Medium -
wordpressDebian Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote... 6.1 Medium -
wordpressDebian wordpress - security update No score -
wordpressDebian A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking... 6.5 Medium -
wordpressDebian wordpress - security update No score -
wordpressDebian Stored XSS in WordPress 8.0 High -
wordpressDebian Authenticated Object Injection in Multisites in WordPress 6.6 Medium -
wordpressDebian SQL injection in WordPress 7.4 High -
wordpressDebian SQL injection in WordPress 8.0 High -
wordpressDebian WordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for... 8.1 High -
wordpressDebian Authenticated cross-site scripting (XSS) in WordPress editor 7.6 High -
wordpressDebian Information Disclosure in wp_die() via JSONP in wordpress 5.3 Medium -
wordpressDebian wordpress - security update No score -
wordpressDebian Insecure Deserialization of untrusted data in rmccue/requests 9.8 Critical -
wordpressDebian WordPress Authenticated disclosure of password-protected posts and pages 6.5 Medium -
wordpressDebian WordPress Authenticated XXE attack when installation is running PHP 8 7.1 High -
wordpressDebian WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility... 9.8 Critical -
wordpressDebian WordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as... 7.5 High -
wordpressDebian WordPress before 5.5.2 allows XSS associated with global variables. 6.1 Medium -
wordpressDebian wp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain... 9.8 Critical -
wordpressDebian is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines... 9.8 Critical -
wordpressDebian WordPress before 5.5.2 allows stored XSS via post slugs. 6.1 Medium -
wordpressDebian WordPress before 5.5.2 allows CSRF attacks that change a theme's background image. 4.3 Medium -
wordpressDebian is_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file... 9.1 Critical - Show olderLoading…