wordpress vulnerabilities (Debian)
362 vulnerabilities.
wordpressDebianCross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5...6.1 MediumwordpressDebianWordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining...8.6 HighwordpressDebianWordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection...7.5 HighwordpressDebianWordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by...7.5 HighwordpressDebianWordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove...7.5 HighwordpressDebianThe oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a...7.5 HighwordpressDebianWordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information...7.5 HighwordpressDebianCross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes...6.1 MediumwordpressDebianCross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class...6.1 MediumwordpressDebianThe customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection...7.5 HighwordpressDebianCross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used...6.1 MediumwordpressDebianCross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2...6.1 MediumwordpressDebianThe wp_http_validate_url function in wp-includes/http.php in WordPress before 4.4.2 allows remote...8.6 HighwordpressDebianOpen redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in...7.4 HighwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in...6.1 MediumwordpressDebianwordpress - regression updateNo scorewordpressDebianCross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows...5.4 MediumwordpressDebianThe mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in...4.3 MediumwordpressDebianCross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to...6.1 MediumwordpressDebianCross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp...4.3 MediumwordpressDebianCross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp...4.3 MediumwordpressDebianCross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in...4.3 MediumwordpressDebianCross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4...6.8 MediumwordpressDebianThe sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress...5.0 MediumwordpressDebianSQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in...7.5 HighwordpressDebianWordPress before 4.2.3 does not properly verify the edit_posts capability, which allows remote...4.0 MediumwordpressDebianCross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated...3.5 LowwordpressDebianCross-site scripting (XSS) vulnerability in example.html in Genericons before 3.3.1, as used in...4.3 MediumwordpressDebianCross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1...4.3 MediumwordpressDebianCross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf...4.3 MediumwordpressDebianMultiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used...4.3 MediumwordpressDebianwp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4...4.3 MediumwordpressDebianwp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x...6.4 MediumwordpressDebianWordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow...6.8 MediumwordpressDebianCross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x...4.3 MediumwordpressDebianCross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3...4.3 MediumwordpressDebianwp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3,...5.0 MediumwordpressDebianCross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2,...6.8 MediumwordpressDebianCross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x...4.3 MediumwordpressDebianCross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3...4.3 MediumwordpressDebianSQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote...7.5 HighwordpressDebianwp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before...7.5 HighwordpressDebianThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...5.0 MediumwordpressDebianThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...5.0 MediumwordpressDebianCross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2,...2.1 LowwordpressDebianwp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation...6.8 MediumwordpressDebianwp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different...6.8 MediumwordpressDebiangetID3 is vulnerable to XML External Entity (XXE)7.5 HighwordpressDebianThe wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3...6.4 MediumwordpressDebianWordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts...4.0 Medium- Show moreLoading…