Логотип exploitDog
product: "wordpress"
Консоль
Логотип exploitDog

exploitDog

product: "wordpress"
WordPress

WordPressсвободно распространяемая система управления содержимым сайта с открытым исходным кодом.

Релизный цикл, информация об уязвимостях

Продукт: WordPress
Вендор: Wordpress

График релизов

6.46.56.66.76.86.920232024202520262027

Недавние уязвимости WordPress

Количество 1 906

nvd логотип

CVE-2011-3129

больше 14 лет назад

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

CVSS2: 9.3
EPSS: Низкий
debian логотип

CVE-2011-3129

больше 14 лет назад

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 be ...

CVSS2: 9.3
EPSS: Низкий
nvd логотип

CVE-2011-3128

больше 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2011-3128

больше 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached att ...

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2011-3127

больше 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

CVSS2: 5.8
EPSS: Низкий
debian логотип

CVE-2011-3127

больше 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rend ...

CVSS2: 5.8
EPSS: Низкий
nvd логотип

CVE-2011-3126

больше 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2011-3126

больше 14 лет назад

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attacke ...

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2011-3125

больше 14 лет назад

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Various security hardening."

CVSS2: 10
EPSS: Низкий
debian логотип

CVE-2011-3125

больше 14 лет назад

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before ...

CVSS2: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2011-3129

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

CVSS2: 9.3
1%
Низкий
больше 14 лет назад
debian логотип
CVE-2011-3129

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 be ...

CVSS2: 9.3
1%
Низкий
больше 14 лет назад
nvd логотип
CVE-2011-3128

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.

CVSS2: 5
1%
Низкий
больше 14 лет назад
debian логотип
CVE-2011-3128

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached att ...

CVSS2: 5
1%
Низкий
больше 14 лет назад
nvd логотип
CVE-2011-3127

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

CVSS2: 5.8
0%
Низкий
больше 14 лет назад
debian логотип
CVE-2011-3127

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rend ...

CVSS2: 5.8
0%
Низкий
больше 14 лет назад
nvd логотип
CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.

CVSS2: 5
1%
Низкий
больше 14 лет назад
debian логотип
CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attacke ...

CVSS2: 5
1%
Низкий
больше 14 лет назад
nvd логотип
CVE-2011-3125

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Various security hardening."

CVSS2: 10
1%
Низкий
больше 14 лет назад
debian логотип
CVE-2011-3125

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before ...

CVSS2: 10
1%
Низкий
больше 14 лет назад

Уязвимостей на страницу


Поделиться