Логотип exploitDog
product: "wordpress"
Консоль
Логотип exploitDog

exploitDog

product: "wordpress"
WordPress

WordPressсвободно распространяемая система управления содержимым сайта с открытым исходным кодом.

Релизный цикл, информация об уязвимостях

Продукт: WordPress
Вендор: Wordpress

График релизов

6.36.46.56.66.76.82023202420252026

Недавние уязвимости WordPress

Количество 1 896

nvd логотип

CVE-2011-3129

около 14 лет назад

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

CVSS2: 9.3
EPSS: Низкий
debian логотип

CVE-2011-3129

около 14 лет назад

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 be ...

CVSS2: 9.3
EPSS: Низкий
nvd логотип

CVE-2011-3128

около 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2011-3128

около 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached att ...

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2011-3127

около 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

CVSS2: 5.8
EPSS: Низкий
debian логотип

CVE-2011-3127

около 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rend ...

CVSS2: 5.8
EPSS: Низкий
nvd логотип

CVE-2011-3126

около 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2011-3126

около 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attacke ...

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2011-3125

около 14 лет назад

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Various security hardening."

CVSS2: 10
EPSS: Низкий
debian логотип

CVE-2011-3125

около 14 лет назад

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before ...

CVSS2: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2011-3129

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

CVSS2: 9.3
1%
Низкий
около 14 лет назад
debian логотип
CVE-2011-3129

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 be ...

CVSS2: 9.3
1%
Низкий
около 14 лет назад
nvd логотип
CVE-2011-3128

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.

CVSS2: 5
1%
Низкий
около 14 лет назад
debian логотип
CVE-2011-3128

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached att ...

CVSS2: 5
1%
Низкий
около 14 лет назад
nvd логотип
CVE-2011-3127

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

CVSS2: 5.8
0%
Низкий
около 14 лет назад
debian логотип
CVE-2011-3127

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rend ...

CVSS2: 5.8
0%
Низкий
около 14 лет назад
nvd логотип
CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.

CVSS2: 5
1%
Низкий
около 14 лет назад
debian логотип
CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attacke ...

CVSS2: 5
1%
Низкий
около 14 лет назад
nvd логотип
CVE-2011-3125

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Various security hardening."

CVSS2: 10
1%
Низкий
около 14 лет назад
debian логотип
CVE-2011-3125

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before ...

CVSS2: 10
1%
Низкий
около 14 лет назад

Уязвимостей на страницу


Поделиться