wordpress vulnerabilities (Debian)
362 vulnerabilities.
wordpressDebianCross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows...4.3 MediumwordpressDebianMultiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU)...7.5 HighwordpressDebianwp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2...4.3 MediumwordpressDebianSQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated...6.5 MediumwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated...2.1 LowwordpressDebianWordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and...4.0 MediumwordpressDebianUnrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and...6.5 MediumwordpressDebianUnrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3...6.0 MediumwordpressDebianCross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2...6.0 MediumwordpressDebianPHPMailer Shell command injection6.8 MediumwordpressDebianSQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to...6.5 MediumwordpressDebianSQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote...7.5 HighwordpressDebianUnspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress...10.0 HighwordpressDebianCross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that...6.8 MediumwordpressDebianCross-site scripting (XSS) vulnerability in index.php in the WordPress Classic 1.5 theme in...4.3 MediumwordpressDebianSQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier,...6.5 MediumwordpressDebianCross-site scripting (XSS) vulnerability in wp-includes/general-template.php in WordPress before...4.3 MediumwordpressDebianxmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users...4.9 MediumwordpressDebian** DISPUTED ** Cross-site scripting (XSS) vulnerability in an mt import in wp-admin/admin.php in...3.5 LowwordpressDebianCross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and...4.3 MediumwordpressDebianwp-login.php in WordPress allows remote attackers to redirect authenticated users to other...6.5 MediumwordpressDebianCross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier...6.8 MediumwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress...5.8 MediumwordpressDebianCross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS...4.3 MediumwordpressDebianWordPress allows remote attackers to determine the existence of arbitrary files, and possibly...5.0 MediumwordpressDebianWordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption)...5.0 MediumwordpressDebianThe wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of...7.8 HighwordpressDebianWordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value...7.8 HighwordpressDebianwp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input...7.5 HighwordpressDebianwp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or...5.0 MediumwordpressDebianWordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after...6.8 MediumwordpressDebianCross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6...6.8 MediumwordpressDebianCross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows...6.8 MediumwordpressDebianWordPress before 2.0.5 does not properly store a profile containing a string representation of a...4.0 MediumwordpressDebianwp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the...4.0 MediumwordpressDebianMultiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0...6.0 MediumwordpressDebianWordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a...5.0 MediumwordpressDebianDirectory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress...5.0 MediumwordpressDebianMultiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote...10.0 HighwordpressDebianWordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to...5.0 MediumwordpressDebianindex.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL...5.0 MediumwordpressDebianvars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof...5.0 MediumwordpressDebianDirect static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers...7.5 HighwordpressDebianCross-site scripting (XSS) vulnerability in the paging links functionality in template-functions...6.8 MediumwordpressDebianMultiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow...4.3 MediumwordpressDebianSQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows...7.5 HighwordpressDebianWordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct...5.0 MediumwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of...4.3 MediumwordpressDebian** DISPUTED ** Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote...2.6 LowwordpressDebianDirectory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06...6.4 Medium- Show moreLoading…