WordPress — свободно распространяемая система управления содержимым сайта с открытым исходным кодом.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 928
CVE-2014-9036
Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3. ...
CVE-2014-9033
Cross-site request forgery (CSRF) vulnerability in wp-login.php in Wor ...
CVE-2014-9032
Cross-site scripting (XSS) vulnerability in the media-playlists featur ...
CVE-2014-9038
wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3. ...
CVE-2014-9035
Cross-site scripting (XSS) vulnerability in Press This in WordPress be ...
CVE-2014-9035
Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-9036
Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted Cascading Style Sheets (CSS) token sequence in a post.
CVE-2014-9033
Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote attackers to hijack the authentication of arbitrary users for requests that reset passwords.
CVE-2014-9031
Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitrary web script or HTML via crafted use of shortcode brackets in a text field, as demonstrated by a comment or a post.
CVE-2014-9038
wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) attacks by referring to a 127.0.0.0/8 resource.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2014-9036 Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3. ... | CVSS2: 4.3 | 2% Низкий | почти 12 лет назад |
| CVE-2014-9033 Cross-site request forgery (CSRF) vulnerability in wp-login.php in Wor ... | CVSS2: 6.8 | 2% Низкий | почти 12 лет назад |
| CVE-2014-9032 Cross-site scripting (XSS) vulnerability in the media-playlists featur ... | CVSS2: 4.3 | 3% Низкий | почти 12 лет назад |
| CVE-2014-9038 wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3. ... | CVSS2: 6.4 | 4% Низкий | почти 12 лет назад |
| CVE-2014-9035 Cross-site scripting (XSS) vulnerability in Press This in WordPress be ... | CVSS2: 4.3 | 2% Низкий | почти 12 лет назад |
 | CVE-2014-9035 Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | CVSS2: 4.3 | 2% Низкий | почти 12 лет назад |
| CVE-2014-9036 Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted Cascading Style Sheets (CSS) token sequence in a post. | CVSS2: 4.3 | 2% Низкий | почти 12 лет назад |
| CVE-2014-9033 Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote attackers to hijack the authentication of arbitrary users for requests that reset passwords. | CVSS2: 6.8 | 2% Низкий | почти 12 лет назад |
| CVE-2014-9031 Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitrary web script or HTML via crafted use of shortcode brackets in a text field, as demonstrated by a comment or a post. | CVSS2: 4.3 | 5% Низкий | почти 12 лет назад |
| CVE-2014-9038 wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) attacks by referring to a 127.0.0.0/8 resource. | CVSS2: 6.4 | 4% Низкий | почти 12 лет назад |
Уязвимостей на страницу