wordpress vulnerabilities (Debian)
362 vulnerabilities.
wordpressDebianThe file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running ...9.3 HighwordpressDebianWordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published,...5.0 MediumwordpressDebianWordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2)...5.8 MediumwordpressDebianWordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames...5.0 MediumwordpressDebianUnspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact...10.0 HighwordpressDebianUnspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact...10.0 HighwordpressDebianwp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote...4.0 MediumwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote...3.5 LowwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4,...4.3 MediumwordpressDebianSQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress...6.0 MediumwordpressDebianMoodle Cross-site Scripting vulnerability in the KSES text cleaning filter4.0 MediumwordpressDebianWordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other...4.0 MediumwordpressDebianCross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6...3.5 LowwordpressDebianUnrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions...6.0 MediumwordpressDebianAlgorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote...4.3 MediumwordpressDebianUnspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows...7.5 HighwordpressDebianWordpress before 2.8.3 does not check capabilities for certain actions, which allows remote...6.4 MediumwordpressDebianWordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1)...10.0 HighwordpressDebianCross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2...4.3 MediumwordpressDebianwp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for...7.5 HighwordpressDebianWordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information...5.0 MediumwordpressDebianWordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote...5.0 MediumwordpressDebianThe forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different...5.0 MediumwordpressDebianWordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt...5.0 MediumwordpressDebianwp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative...4.9 MediumwordpressDebianwp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the...10.0 HighwordpressDebianOpen redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote...4.3 MediumwordpressDebianwp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not...8.5 HighwordpressDebianCross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator ...4.3 MediumwordpressDebianWordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which...4.0 MediumwordpressDebianThe _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1)...10.0 HighwordpressDebianDirectory traversal vulnerability in the get_category_template function in wp-includes/theme.php...9.3 HighwordpressDebianWordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username...5.1 MediumwordpressDebianThe (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template...7.5 HighwordpressDebianUnrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote...9.0 HighwordpressDebianCross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject...4.3 MediumwordpressDebianwp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from...7.5 HighwordpressDebianThe cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string...7.5 HighwordpressDebianMoodle vulnerable to Cross-site scripting4.3 MediumwordpressDebianThe XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled,...6.4 MediumwordpressDebianMultiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote...5.0 MediumwordpressDebianWordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty...5.0 MediumwordpressDebianDirectory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows...7.5 HighwordpressDebianCross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and...4.3 MediumwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote...4.3 MediumwordpressDebianWordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid...5.0 MediumwordpressDebianSQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote...6.8 MediumwordpressDebianWordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash,...9.8 CriticalwordpressDebianCross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows...2.6 LowwordpressDebianCross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 allows remote...4.3 Medium- Show moreLoading…