Skip to contentWordpress vulnerabilities
Newest
- wordpresswp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from...CVE-2008-2146Fix available7.5 High
- wordpress download monitor pluginSQL injection vulnerability in wp-download_monitor/download.php in the Download Monitor 2.0.6...CVE-2008-20347.5 High
- wordpressThe cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string...CVE-2008-1930Public exploitFix available7.5 High
- wordpress wpssSQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for...CVE-2008-1982Public exploit7.5 High
- arnos toolbox wp-download, wordpress wp download +1 moreSQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows...CVE-2008-1646Public exploit7.5 High
- wordpressMultiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to...CVE-2008-1304Public exploit4.3 Medium
- wordpress sniplets pluginMultiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for...CVE-2008-1061Public exploit4.3 Medium
- wordpress sniplets pluginEval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for...CVE-2008-1060Public exploitEPSS 44.2%7.5 High
- wordpress sniplets pluginPHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and...CVE-2008-1059Public exploitEPSS 48.3%7.5 High
- wordpress photo album pluginMultiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin...CVE-2008-0939Public exploit7.5 High
- wordpress dean logan wp-people pluginSQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for...CVE-2008-0845Public exploit7.5 High
- john godley search unleashed, wordpress search unleashed plugin +1 moreCross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0...CVE-2008-08374.3 Medium
- simon elvery wp-footnotesMultiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP...CVE-2008-0691Public exploit4.3 Medium
- wordpress st newsletter pluginSQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter)...CVE-2008-0683Public exploit7.5 High
- wordpress wordspewSQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress...CVE-2008-0682Public exploit7.5 High
- wordpressThe XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled,...CVE-2008-0664Fix available6.4 Medium
- wordpress wassup pluginMultiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for...CVE-2008-0520Public exploit7.5 High
- wordpress permalinks migration pluginCross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's...CVE-2008-05086.8 Medium
- wordpress adserveSQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote...CVE-2008-0507Public exploit7.5 High
- wordpress wp cal pluginSQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress...CVE-2008-0490Public exploit7.5 High
- wordpress wp forumSQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to...CVE-2008-0388Public exploit6.8 Medium
- wordpress filemanagerUnrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin...CVE-2008-0222Public exploit7.5 High
- wordpress captchaMultiple cross-site scripting (XSS) vulnerabilities in captcha\captcha.php in the Captcha! 2.5d...CVE-2008-02064.3 Medium
- wordpress math comment spam protection pluginMultiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in...CVE-2008-02054.3 Medium
- wordpress math comment spam protection pluginMultiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the...CVE-2008-02044.3 Medium
- wordpress cryptographpMultiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp...CVE-2008-02034.3 Medium
- wordpress wp-contactformMultiple cross-site scripting (XSS) vulnerabilities in wp-contact-form/options-contactform.php in...CVE-2008-01974.3 Medium
- wordpressMultiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote...CVE-2008-0196Fix available5.0 Medium
- wordpressWordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty...CVE-2008-0195Fix available5.0 Medium
- wordpressDirectory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows...CVE-2008-0194Fix available7.5 High
- wordpressCross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and...CVE-2008-0193Public exploitFix available4.3 Medium
- wordpressMultiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote...CVE-2008-0192Public exploitFix available4.3 Medium
- wordpressWordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid...CVE-2008-01915.0 Medium
- wordpress pictpressMultiple directory traversal vulnerabilities in resize.php in the PictPress 0.91 and earlier...CVE-2007-6369Public exploit5.0 Medium
- wordpressSQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote...CVE-2007-6318Public exploitFix available6.8 Medium
- wordpress, fedoraproject fedora +1 moreWordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash,...CVE-2007-6013Fix available9.8 Critical
- wordpressCross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows...CVE-2007-5710Public exploitFix available2.6 Low
- wordpressCross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 allows remote...CVE-2007-5106Fix available4.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows...CVE-2007-5105Public exploitFix available4.3 Medium
- wordpressMultiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU)...CVE-2007-4894Fix available7.5 High
- wordpresswp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2...CVE-2007-4893Fix available4.3 Medium
- wordpress muCross-site scripting (XSS) vulnerability in wp-newblog.php in WordPress multi-user (MU) 1.0 and...CVE-2007-45444.3 Medium
- wordpress poolCross-site scripting (XSS) vulnerability in index.php in the Pool 1.0.7 theme for WordPress...CVE-2007-4482Public exploit4.3 Medium
- wordpress blixCross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1...CVE-2007-44814.3 Medium
- wordpress siriusCross-site scripting (XSS) vulnerability in index.php in the Sirius 1.0 theme for WordPress...CVE-2007-44804.3 Medium
- wordpress unamed theme, unamed theme se +1 moreCross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special...CVE-2007-41665.0 Medium
- wordpressSQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated...CVE-2007-4154Fix available6.5 Medium
- wordpressMultiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated...CVE-2007-4153Fix available2.1 Low
- wordpressCross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin...CVE-2007-41394.3 Medium
- wordpress blix, blixed, blixkrieg +2 moreCross-site scripting (XSS) vulnerability in a certain index.php installation script related to...CVE-2007-40144.3 Medium
- Show moreLoading…