wordpress vulnerabilities (Ubuntu)
171 vulnerabilities.
-
wordpressUbuntu WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability 6.9 Medium -
wordpressUbuntu WordPress Core Remote File Inclusion Vulnerability 8.1 High -
wordpressUbuntu WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability 7.1 High -
wordpressUbuntu ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCE 9.2 Critical -
wordpressUbuntu WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A m… 8.8 High -
wordpressUbuntu WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escala… 8.9 High -
wordpressUbuntu WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution 9.8 Critical -
wordpressUbuntu WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query 5.9 Medium -
wordpressUbuntu WordPress 6.9 - 6.9.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Note Creation via REST API 4.3 Medium -
wordpressUbuntu WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability 5.9 Medium -
wordpressUbuntu WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability 4.3 Medium -
wordpressUbuntu WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts... 3.7 Low -
wordpressUbuntu WordPress Core < 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via use of the_meta(); function 4.9 Medium -
wordpressUbuntu WordPress core < 6.5.5 - Auth. Arbitrary .html File Read (Windows Only) vulnerability 5.0 Medium -
wordpressUbuntu WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability 6.5 Medium -
wordpressUbuntu WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API 6.4 Medium -
wordpressUbuntu WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar... 7.2 High -
wordpressUbuntu WordPress Core <= 6.4.3 - Sensitive Information Exposure via redirect_guess_404_permalink 5.3 Medium -
wordpressUbuntu Remote Code Execution in `WP_HTML_Token` 5.5 Medium -
wordpressUbuntu PHP file upload bypass via Plugin installer 7.7 High -
wordpressUbuntu WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure 5.3 Medium -
wordpressUbuntu WordPress < 6.3.2 is vulnerable to Broken Access Control 4.3 Medium -
wordpressUbuntu Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block 6.5 Medium -
wordpressUbuntu WordPress Core < 6.2.1 - Directory Traversal 5.4 Medium -
wordpressUbuntu WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and... 5.3 Medium -
wordpressUbuntu WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding 5.9 Medium -
wordpressUbuntu Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote... 5.3 Medium -
wordpressUbuntu Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote... 6.1 Medium -
wordpressUbuntu Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote... 6.1 Medium -
wordpressUbuntu Goolytics - Simple Google Analytics < 1.1.2 - Admin+ Stored Cross-Site Scripting 4.8 Medium -
wordpressUbuntu Donation Thermometer < 2.1.3 - Admin+ Stored Cross-Site Scripting 4.8 Medium -
wordpressUbuntu Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload 8.8 High -
wordpressUbuntu Frontend File Manager < 21.3 - Unauthenticated File Renaming 5.3 Medium -
wordpressUbuntu Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS 5.4 Medium -
wordpressUbuntu WP Socializer < 7.3 - Admin+ Stored Cross-Site Scripting 4.8 Medium -
wordpressUbuntu DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting 4.8 Medium -
wordpressUbuntu Inefficient Regular Expression Complexity in moment 7.5 High -
wordpressUbuntu Stored XSS in WordPress 8.0 High -
wordpressUbuntu Authenticated Object Injection in Multisites in WordPress 6.6 Medium -
wordpressUbuntu SQL injection in WordPress 7.4 High -
wordpressUbuntu SQL injection in WordPress 8.0 High -
wordpressUbuntu WordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for... 8.1 High -
wordpressUbuntu Private data disclosure/privilege escalation through the block editor in Wordpress 6.8 Medium -
wordpressUbuntu WordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widget 7.6 High -
wordpressUbuntu Authenticated cross-site scripting (XSS) in WordPress editor 7.6 High -
wordpressUbuntu Information Disclosure in wp_die() via JSONP in wordpress 5.3 Medium -
wordpressUbuntu Insecure Deserialization of untrusted data in rmccue/requests 9.8 Critical -
wordpressUbuntu WordPress Authenticated disclosure of password-protected posts and pages 6.5 Medium -
wordpressUbuntu WordPress Authenticated XXE attack when installation is running PHP 8 7.1 High -
wordpressUbuntu WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility... 9.8 Critical - Show olderLoading…