Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Wordpress

Wordpress vulnerabilities

Products

Wordpress362
Buddypress17
Wordpress-develop17
Mu10
Adserve3
Core3
Sniplets Plugin3
Blix2
Geo Controller2
Math Comment Spam Protection Plugin2
Max Addons Pro For Bricks2
Pay-with-tweet2
Royal-elementor-addons2
Wassup Plugin2

Newest

Known exploitedIn KEVPublic exploitFix available

wordpress** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and...CVE-2012-0937Public exploitDisputed5.0 MediumJanuary 30, 2012
wordpress** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php...CVE-2012-0782Public exploitDisputed4.3 MediumJanuary 30, 2012
wordpress** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and...CVE-2011-4899Public exploitDisputed7.5 HighJanuary 30, 2012
wordpress** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and...CVE-2011-4898Public exploitDisputed5.0 MediumJanuary 30, 2012
wordpressCross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1,...CVE-2012-0287Fix available2.6 LowJanuary 6, 2012
wordpress wordpress-usersSQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier...CVE-2011-46697.5 HighDecember 2, 2011
wordpressWordPress 2.9.2 and 3.0.4 allows remote attackers to obtain sensitive information via a direct...CVE-2011-38185.0 MediumSeptember 24, 2011
wordpresswp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact...CVE-2011-3130Fix available7.5 HighAugust 10, 2011
wordpressThe file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running ...CVE-2011-3129Fix available9.3 HighAugust 10, 2011
wordpressWordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published,...CVE-2011-3128Fix available5.0 MediumAugust 10, 2011
wordpressWordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2)...CVE-2011-3127Fix available5.8 MediumAugust 10, 2011
wordpressWordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames...CVE-2011-3126Fix available5.0 MediumAugust 10, 2011
wordpressUnspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact...CVE-2011-3125Fix available10.0 HighAugust 10, 2011
wordpressUnspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact...CVE-2011-3122Fix available10.0 HighAugust 10, 2011
wordpresswp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote...CVE-2011-0701Fix available4.0 MediumMarch 11, 2011
wordpressMultiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote...CVE-2011-0700Fix available3.5 LowMarch 11, 2011
wordpressMultiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4,...CVE-2010-4536Fix available4.3 MediumJanuary 3, 2011
wordpressSQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress...CVE-2010-4257Fix available6.0 MediumDecember 7, 2010
wordpressWordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other...CVE-2010-0682Public exploitFix availableEPSS 10.0%4.0 MediumFebruary 23, 2010
wordpressCross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6...CVE-2009-3891Fix available3.5 LowNovember 17, 2009
wordpressUnrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/functions...CVE-2009-3890Public exploitFix available6.0 MediumNovember 17, 2009
wordpressAlgorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote...CVE-2009-3622Fix available4.3 MediumOctober 23, 2009
wordpress peter\'s math anti-spam for wordpressPeter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by...CVE-2008-7216Public exploit4.3 MediumSeptember 11, 2009
wordpressWordpress before 2.8.3 does not check capabilities for certain actions, which allows remote...CVE-2009-2854Fix available6.4 MediumAugust 18, 2009
wordpressWordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1)...CVE-2009-2853Fix available10.0 HighAugust 18, 2009
wordpressCross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2...CVE-2009-2851Public exploitFix available4.3 MediumAugust 18, 2009
wordpresswp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for...CVE-2009-2762Public exploitFix availableEPSS 19.6%7.5 HighAugust 13, 2009
wordpress, wordpress mu +1 moreWordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information...CVE-2009-2432Fix available5.0 MediumJuly 10, 2009
wordpressWordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote...CVE-2009-2431Fix available5.0 MediumJuly 10, 2009
wordpress, wordpress mu +1 moreThe forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different...CVE-2009-2336Fix available5.0 MediumJuly 10, 2009
wordpress, wordpress mu +1 moreWordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt...CVE-2009-2335Public exploitFix availableEPSS 85.0%5.0 MediumJuly 10, 2009
wordpress, wordpress mu +1 morewp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative...CVE-2009-2334Public exploitFix available4.9 MediumJuly 10, 2009
wordpresswp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the...CVE-2008-6767Fix available10.0 HighApril 28, 2009
wordpressOpen redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote...CVE-2008-6762Fix available4.3 MediumApril 28, 2009
wordpress muCross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu...CVE-2009-1030Public exploit4.3 MediumMarch 20, 2009
wordpress page flip image gallery pluginDirectory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2...CVE-2008-5752Public exploit4.3 MediumDecember 30, 2008
wordpress, wordpress mu +1 morewp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not...CVE-2008-5695Public exploitFix availableEPSS 12.0%8.5 HighDecember 19, 2008
wordpressCross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator ...CVE-2008-5278Fix available4.3 MediumNovember 28, 2008
wordpressWordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which...CVE-2008-5113Fix available4.0 MediumNovember 17, 2008
snoopy project snoopy, debian linux, nagios +1 more +3 moreThe _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1)...CVE-2008-4796Fix available10.0 HighOctober 30, 2008
wordpressDirectory traversal vulnerability in the get_category_template function in wp-includes/theme.php...CVE-2008-4769Public exploitFix available9.3 HighOctober 28, 2008
wordpress muCross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2...CVE-2008-4671Public exploit4.3 MediumOctober 22, 2008
the spanner spambam pluginThe SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog...CVE-2008-4616Public exploit5.0 MediumOctober 20, 2008
wordpressWordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username...CVE-2008-4106Fix available5.1 MediumSeptember 18, 2008
wordpressThe (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template...CVE-2008-3747Fix available7.5 HighAugust 27, 2008
giulio ganci wp downloads managerUnrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager...CVE-2008-3362Public exploitEPSS 16.8%10.0 HighJuly 30, 2008
wordpressCross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only,...CVE-2008-3233Public exploit4.3 MediumJuly 18, 2008
wordpress upload file pluginSQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows...CVE-2008-2510Public exploit7.5 HighMay 29, 2008
wordpressUnrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote...CVE-2008-2392Fix available9.0 HighMay 21, 2008
wordpressCross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject...CVE-2008-2068Fix available4.3 MediumMay 2, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open