WordPress — свободно распространяемая система управления содержимым сайта с открытым исходным кодом.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 928
CVE-2017-5491
wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name.
CVE-2017-5492
Cross-site request forgery (CSRF) vulnerability in the widget-editing ...
CVE-2017-5488
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update ...
CVE-2017-5490
Cross-site scripting (XSS) vulnerability in the theme-name fallback fu ...
CVE-2017-5491
wp-mail.php in WordPress before 4.7.1 might allow remote attackers to ...
CVE-2017-5493
wp-includes/ms-functions.php in the Multisite WordPress API in WordPre ...
CVE-2017-5489
Cross-site request forgery (CSRF) vulnerability in WordPress before 4. ...
CVE-2017-5487
wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in t ...
BDU:2026-13738
Уязвимость метода pingback.ping системы управления содержимым сайта WordPress, позволяющая нарушителю осуществить SSRF-атаку
CVE-2016-7168
Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2017-5491 wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name. | CVSS3: 5.3 | 3% Низкий | почти 10 лет назад |
| CVE-2017-5492 Cross-site request forgery (CSRF) vulnerability in the widget-editing ... | CVSS3: 8.8 | 2% Низкий | почти 10 лет назад |
| CVE-2017-5488 Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update ... | CVSS3: 6.1 | 2% Низкий | почти 10 лет назад |
| CVE-2017-5490 Cross-site scripting (XSS) vulnerability in the theme-name fallback fu ... | CVSS3: 6.1 | 2% Низкий | почти 10 лет назад |
| CVE-2017-5491 wp-mail.php in WordPress before 4.7.1 might allow remote attackers to ... | CVSS3: 5.3 | 3% Низкий | почти 10 лет назад |
| CVE-2017-5493 wp-includes/ms-functions.php in the Multisite WordPress API in WordPre ... | CVSS3: 7.5 | 3% Низкий | почти 10 лет назад |
| CVE-2017-5489 Cross-site request forgery (CSRF) vulnerability in WordPress before 4. ... | CVSS3: 8.8 | 1% Низкий | почти 10 лет назад |
| CVE-2017-5487 wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in t ... | CVSS3: 5.3 | 87% Высокий | почти 10 лет назад |
 | BDU:2026-13738 Уязвимость метода pingback.ping системы управления содержимым сайта WordPress, позволяющая нарушителю осуществить SSRF-атаку | CVSS3: 5.9 | 3% Низкий | почти 10 лет назад |
 | CVE-2016-7168 Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename. | CVSS3: 4.8 | 3% Низкий | почти 10 лет назад |
Уязвимостей на страницу