wordpress vulnerabilities (Mageia)
37 vulnerabilities.
-
wordpressMageia The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in... 4.3 Medium -
wordpressMageia Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to... 6.1 Medium -
wordpressMageia Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp... 4.3 Medium -
wordpressMageia Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp... 4.3 Medium -
wordpressMageia Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in... 4.3 Medium -
wordpressMageia Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4... 6.8 Medium -
wordpressMageia The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress... 5.0 Medium -
wordpressMageia SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in... 7.5 High -
wordpressMageia WordPress before 4.2.3 does not properly verify the edit_posts capability, which allows remote... 4.0 Medium -
wordpressMageia Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated... 3.5 Low -
wordpressMageia Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1... 4.3 Medium -
wordpressMageia Updated wordpress packages fix security vulnerabilities No score -
wordpressMageia wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4... 4.3 Medium -
wordpressMageia wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x... 6.4 Medium -
wordpressMageia WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow... 6.8 Medium -
wordpressMageia Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x... 4.3 Medium -
wordpressMageia Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3... 4.3 Medium -
wordpressMageia wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3,... 5.0 Medium -
wordpressMageia Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2,... 6.8 Medium -
wordpressMageia Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x... 4.3 Medium -
wordpressMageia Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3... 4.3 Medium -
wordpressMageia Updated wordpress packages fix security vulnerabilities No score -
wordpressMageia The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3... 6.4 Medium -
wordpressMageia WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts... 4.0 Medium -
wordpressMageia The default configuration of WordPress before 3.6.1 does not prevent uploads of .swf and .exe... 3.5 Low -
wordpressMageia The get_allowed_mime_types function in wp-includes/functions.php in WordPress before 3.6.1 does... 4.3 Medium -
wordpressMageia wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof... 3.5 Low -
wordpressMageia WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which... 7.5 High -
wordpressMageia wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has... 7.5 High -
wordpressMageia The default configuration of SWFUpload in WordPress before 3.5.2 has an unrestrictive security... 4.3 Medium -
wordpressMageia moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before... 4.3 Medium -
wordpressMageia WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers... 4.3 Medium -
wordpressMageia WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider... 4.3 Medium -
wordpressMageia Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote... 4.3 Medium -
wordpressMageia WordPress before 3.5.2 does not properly check the capabilities of roles, which allows remote... 4.0 Medium -
wordpressMageia The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet... 4.3 Medium -
wordpressMageia wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows... 4.3 Medium