WordPress — свободно распространяемая система управления содержимым сайта с открытым исходным кодом.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 928
CVE-2012-6635
wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft.
CVE-2012-6634
wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value.
CVE-2012-6633
Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field.
CVE-2010-5293
wp-includes/comment.php in WordPress before 3.0.2 does not properly wh ...
CVE-2010-5296
wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisi ...
CVE-2010-5294
Multiple cross-site scripting (XSS) vulnerabilities in the request_fil ...
CVE-2010-5295
Cross-site scripting (XSS) vulnerability in wp-admin/plugins.php in Wo ...
CVE-2010-5297
WordPress before 3.0.1, when a Multisite installation is used, permane ...
CVE-2011-5270
wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the ...
CVE-2012-6633
Cross-site scripting (XSS) vulnerability in wp-includes/default-filter ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2012-6635 wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft. | CVSS2: 4 | 2% Низкий | почти 13 лет назад |
| CVE-2012-6634 wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value. | CVSS2: 6.4 | 2% Низкий | почти 13 лет назад |
| CVE-2012-6633 Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field. | CVSS2: 4.3 | 2% Низкий | почти 13 лет назад |
| CVE-2010-5293 wp-includes/comment.php in WordPress before 3.0.2 does not properly wh ... | CVSS2: 5.8 | 3% Низкий | почти 13 лет назад |
| CVE-2010-5296 wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisi ... | CVSS2: 4.9 | 2% Низкий | почти 13 лет назад |
| CVE-2010-5294 Multiple cross-site scripting (XSS) vulnerabilities in the request_fil ... | CVSS2: 4.3 | 1% Низкий | почти 13 лет назад |
| CVE-2010-5295 Cross-site scripting (XSS) vulnerability in wp-admin/plugins.php in Wo ... | CVSS2: 4.3 | 2% Низкий | почти 13 лет назад |
| CVE-2010-5297 WordPress before 3.0.1, when a Multisite installation is used, permane ... | CVSS2: 2.1 | 2% Низкий | почти 13 лет назад |
| CVE-2011-5270 wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the ... | CVSS2: 4 | 1% Низкий | почти 13 лет назад |
| CVE-2012-6633 Cross-site scripting (XSS) vulnerability in wp-includes/default-filter ... | CVSS2: 4.3 | 2% Низкий | почти 13 лет назад |
Уязвимостей на страницу