WordPress — свободно распространяемая система управления содержимым сайта с открытым исходным кодом.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 928
CVE-2016-1564
Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php.
CVE-2016-4567
Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn."
CVE-2016-4566
Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack.
CVE-2015-7989
Cross-site scripting (XSS) vulnerability in the user list table in Wor ...
CVE-2016-1564
Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/cla ...
CVE-2015-8834
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in W ...
CVE-2015-5714
Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 all ...
CVE-2015-5715
The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in ...
CVE-2016-2221
Open redirect vulnerability in the wp_validate_redirect function in wp ...
CVE-2016-4567
Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2016-1564 Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php. | CVSS3: 6.1 | 3% Низкий | больше 10 лет назад |
| CVE-2016-4567 Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as in MediaElement.js before 2.21.0, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via an obfuscated form of the jsinitfunction parameter, as demonstrated by "jsinitfunctio%gn." | CVSS3: 6.1 | 7% Низкий | больше 10 лет назад |
| CVE-2016-4566 Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack. | CVSS3: 6.1 | 6% Низкий | больше 10 лет назад |
| CVE-2015-7989 Cross-site scripting (XSS) vulnerability in the user list table in Wor ... | CVSS3: 5.4 | 2% Низкий | больше 10 лет назад |
| CVE-2016-1564 Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/cla ... | CVSS3: 6.1 | 3% Низкий | больше 10 лет назад |
| CVE-2015-8834 Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in W ... | CVSS3: 6.1 | 2% Низкий | больше 10 лет назад |
| CVE-2015-5714 Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 all ... | CVSS3: 6.1 | 7% Низкий | больше 10 лет назад |
| CVE-2015-5715 The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in ... | CVSS3: 4.3 | 6% Низкий | больше 10 лет назад |
| CVE-2016-2221 Open redirect vulnerability in the wp_validate_redirect function in wp ... | CVSS3: 7.4 | 4% Низкий | больше 10 лет назад |
| CVE-2016-4567 Cross-site scripting (XSS) vulnerability in flash/FlashMediaElement.as ... | CVSS3: 6.1 | 7% Низкий | больше 10 лет назад |
Уязвимостей на страницу