wordpress vulnerabilities (Ubuntu)
170 vulnerabilities.
wordpressUbuntuWordPress before 5.5.2 mishandles embeds from disabled sites on a multisite network, as...7.5 HighwordpressUbuntuWordPress before 5.5.2 allows XSS associated with global variables.6.1 MediumwordpressUbuntuwp-includes/class-wp-xmlrpc-server.php in WordPress before 5.5.2 allows attackers to gain...9.8 CriticalwordpressUbuntuis_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines...9.8 CriticalwordpressUbuntuWordPress before 5.5.2 allows stored XSS via post slugs.6.1 MediumwordpressUbuntuWordPress before 5.5.2 allows CSRF attacks that change a theme's background image.4.3 MediumwordpressUbuntuis_protected_meta in wp-includes/meta.php in WordPress before 5.5.2 allows arbitrary file...9.1 CriticalwordpressUbuntuWordPress before 5.5.2 allows attackers to gain privileges via XML-RPC.9.8 CriticalwordpressUbuntuIn wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could...5.3 MediumwordpressUbuntuAuthenticated XSS via media attachment page in WordPress6.8 MediumwordpressUbuntuOpen redirect in wp_validate_redirect() in WordPress5.7 MediumwordpressUbuntuAuthenticated self-XSS via theme uploads in WordPress2.4 LowwordpressUbuntuset-screen-option filter misuse by plugins leading to privilege escalation in WordPress3.5 LowwordpressUbuntuAuthenticated XSS through embed block in WordPress5.4 MediumwordpressUbuntuSpecially crafted filenames in WordPress leading to XSS8.7 HighwordpressUbuntuUnauthenticated disclosure of certain private posts in WordPress5.8 MediumwordpressUbuntuCross-site scripting in stats method (object cache) in WordPress5.8 MediumwordpressUbuntuCross-site scripting (XSS) in Search block in WordPress6.4 MediumwordpressUbuntuAuthenticated cross-site scripting (XSS) in WordPress Customizer5.8 MediumwordpressUbuntuPassword reset links invalidation issue in WordPress6.1 MediumwordpressUbuntuwp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon...9.8 CriticalwordpressUbuntuWordPress before 5.3.1 allowed an attacker to create a cross-site scripting attack (XSS) in well...6.1 MediumwordpressUbuntuWordPress before 5.3.1 allowed an unauthenticated user to make a post sticky through the REST API...4.3 MediumwordpressUbuntuStored cross-site scripting (XSS) in WordPress block editor5.8 MediumwordpressUbuntuStored cross-site scripting (XSS) in WordPress block editor5.8 MediumwordpressUbuntuIn WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the...5.3 MediumwordpressUbuntuWordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE...6.1 MediumwordpressUbuntuWordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because...7.5 HighwordpressUbuntuWordPress before 5.2.4 does not properly consider type confusion during validation of the referer...8.8 HighwordpressUbuntuWordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.5.4 MediumwordpressUbuntuWordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL...9.8 CriticalwordpressUbuntuWordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because Windows...9.8 CriticalwordpressUbuntuWordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.6.1 MediumwordpressUbuntuWordPress before 5.2.3 allows XSS in shortcode previews.6.1 MediumwordpressUbuntuWordPress before 5.2.3 allows reflected XSS in the dashboard.6.1 MediumwordpressUbuntuWordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp...6.1 MediumwordpressUbuntuWordPress before 5.2.3 allows XSS in post previews by authenticated users.5.4 MediumwordpressUbuntuIn WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp...6.1 MediumwordpressUbuntuWordPress before 5.2.3 allows XSS in stored comments.6.1 MediumwordpressUbuntuWordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain...5.3 MediumwordpressUbuntuWordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution...8.8 HighwordpressUbuntuWordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges...6.5 MediumwordpressUbuntuWordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an...8.8 HighwordpressUbuntuIn WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by...5.4 MediumwordpressUbuntuIn WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on...6.5 MediumwordpressUbuntuIn WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a...7.5 HighwordpressUbuntuIn WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use...6.1 MediumwordpressUbuntuIn WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors...5.4 MediumwordpressUbuntuIn WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection...9.8 CriticalwordpressUbuntuIn WordPress before 4.9.9 and 5.x before 5.0.1, authors could modify metadata to bypass intended...6.5 Medium- Show moreLoading…