WordPress — свободно распространяемая система управления содержимым сайта с открытым исходным кодом.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 914
CVE-2015-8834
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in W ...
CVE-2015-8834
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.
CVE-2015-7989
Cross-site scripting (XSS) vulnerability in the user list table in Wor ...
CVE-2015-7989
Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.
CVE-2015-5715
The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in ...
CVE-2015-5715
The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors.
CVE-2015-5714
Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 all ...
CVE-2015-5714
Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags.
CVE-2015-5714
Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags.
CVE-2015-8834
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2015-8834 Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in W ... | CVSS3: 6.1 | 2% Низкий | больше 10 лет назад |
 | CVE-2015-8834 Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440. | CVSS3: 6.1 | 2% Низкий | больше 10 лет назад |
| CVE-2015-7989 Cross-site scripting (XSS) vulnerability in the user list table in Wor ... | CVSS3: 5.4 | 2% Низкий | больше 10 лет назад |
| CVE-2015-7989 Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714. | CVSS3: 5.4 | 2% Низкий | больше 10 лет назад |
| CVE-2015-5715 The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in ... | CVSS3: 4.3 | 6% Низкий | больше 10 лет назад |
| CVE-2015-5715 The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors. | CVSS3: 4.3 | 6% Низкий | больше 10 лет назад |
| CVE-2015-5714 Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 all ... | CVSS3: 6.1 | 7% Низкий | больше 10 лет назад |
| CVE-2015-5714 Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags. | CVSS3: 6.1 | 7% Низкий | больше 10 лет назад |
 | CVE-2015-5714 Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags. | CVSS3: 6.1 | 7% Низкий | больше 10 лет назад |
| CVE-2015-8834 Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440. | CVSS3: 6.1 | 2% Низкий | больше 10 лет назад |
Уязвимостей на страницу