wordpress vulnerabilities (Debian)
362 vulnerabilities.
wordpressDebianwp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly...4.0 MediumwordpressDebianwp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive...6.4 MediumwordpressDebianCross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3...4.3 MediumwordpressDebianwp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability...4.0 MediumwordpressDebianWordPress before 3.0.1, when a Multisite installation is used, permanently retains the "site...2.1 LowwordpressDebianwp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used,...4.9 MediumwordpressDebianCross-site scripting (XSS) vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might...4.3 MediumwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in the request_filesystem_credentials...4.3 MediumwordpressDebianwp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and...5.8 MediumwordpressDebianCross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options...6.8 MediumwordpressDebianThe default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe...3.5 LowwordpressDebianThe get_allowed_mime_types function in wp-includes/functions.php in WordPress before 3.6.1 does...4.3 MediumwordpressDebianwp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof...3.5 LowwordpressDebianWordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which...7.5 HighwordpressDebianwp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has...7.5 HighwordpressDebianCross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as...4.3 MediumwordpressDebianCross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as...4.3 MediumwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote...4.3 MediumwordpressDebianThe XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to...6.4 MediumwordpressDebianThe default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security...4.3 MediumwordpressDebianmoxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before...4.3 MediumwordpressDebianWordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers...4.3 MediumwordpressDebianWordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider...4.3 MediumwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote...4.3 MediumwordpressDebianWordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote...4.0 MediumwordpressDebianThe HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet...4.3 MediumwordpressDebianwp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows...4.3 MediumwordpressDebianPHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests5.0 MediumwordpressDebianWordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout...2.6 LowwordpressDebianCross-site request forgery (CSRF) vulnerability in wp-admin/index.php in WordPress 3.4.2 allows...6.8 MediumwordpressDebianwp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not...3.5 LowwordpressDebianThe create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does...4.0 MediumwordpressDebianThe XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly...6.5 MediumwordpressDebianWordPress before 3.4.1 does not properly restrict access to post contents such as private or...5.0 MediumwordpressDebianCross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1...6.8 MediumwordpressDebianThe map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when...2.6 LowwordpressDebianThe make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not...5.0 MediumwordpressDebianCross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to...4.3 MediumwordpressDebianwp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier...4.3 MediumwordpressDebianwp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside...4.3 MediumwordpressDebianwp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to...5.5 MediumwordpressDebianPlupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other...5.0 MediumwordpressDebianUnspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown...10.0 HighwordpressDebianCross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as...10.0 HighwordpressDebian** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and...5.0 MediumwordpressDebian** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php...4.3 MediumwordpressDebian** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and...7.5 HighwordpressDebian** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and...5.0 MediumwordpressDebianCross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1,...2.6 LowwordpressDebianwp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact...7.5 High- Show moreLoading…