wordpress vulnerabilities (Ubuntu)
170 vulnerabilities.
wordpressUbuntuCross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes...4.8 MediumwordpressUbuntuCross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp...8.8 HighwordpressUbuntuCross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5...6.1 MediumwordpressUbuntuWordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining...8.6 HighwordpressUbuntuWordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection...7.5 HighwordpressUbuntuWordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by...7.5 HighwordpressUbuntuWordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove...7.5 HighwordpressUbuntuThe oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a...7.5 HighwordpressUbuntuWordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information...7.5 HighwordpressUbuntuCross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes...6.1 MediumwordpressUbuntuCross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class...6.1 MediumwordpressUbuntuThe customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection...7.5 HighwordpressUbuntuCross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used...6.1 MediumwordpressUbuntuThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...5.0 MediumwordpressUbuntuThe Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33...5.0 MediumwordpressUbuntuCross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2,...2.1 LowwordpressUbuntuwp-includes/pluggable.php in WordPress before 3.9.2 does not use delimiters during concatenation...6.8 MediumwordpressUbuntuwp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different...6.8 MediumwordpressUbuntuCross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options...6.8 MediumwordpressUbuntuWordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout...2.6 LowwordpressUbuntuWordPress 2.9.2 and 3.0.4 allows remote attackers to obtain sensitive information via a direct...5.0 Medium