Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

WordPress

WordPressсвободно распространяемая система управления содержимым сайта с открытым исходным кодом.

Релизный цикл, информация об уязвимостях

Продукт: WordPress
Вендор: Wordpress

График релизов

6.56.66.76.86.97.02024202520262027

Недавние уязвимости WordPress

Количество 1 912

ubuntu логотип

CVE-2008-3233

около 18 лет назад

Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2008-2392

около 18 лет назад

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

CVSS2: 9
EPSS: Низкий
debian логотип

CVE-2008-2392

около 18 лет назад

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier ...

CVSS2: 9
EPSS: Низкий
ubuntu логотип

CVE-2008-2392

около 18 лет назад

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

CVSS2: 9
EPSS: Низкий
redhat логотип

CVE-2008-2392

около 18 лет назад

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

EPSS: Низкий
nvd логотип

CVE-2008-2146

около 18 лет назад

wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2008-2146

около 18 лет назад

wp-includes/vars.php in Wordpress before 2.2.3 does not properly extra ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2008-2146

около 18 лет назад

wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages.

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2008-2068

около 18 лет назад

Cross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2008-2068

около 18 лет назад

Cross-site scripting (XSS) vulnerability in WordPress 2.5 allows remot ...

CVSS2: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
ubuntu логотип
CVE-2008-3233

Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS2: 4.3
4%
Низкий
около 18 лет назад
nvd логотип
CVE-2008-2392

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

CVSS2: 9
4%
Низкий
около 18 лет назад
debian логотип
CVE-2008-2392

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier ...

CVSS2: 9
4%
Низкий
около 18 лет назад
ubuntu логотип
CVE-2008-2392

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

CVSS2: 9
4%
Низкий
около 18 лет назад
redhat логотип
CVE-2008-2392

Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

4%
Низкий
около 18 лет назад
nvd логотип
CVE-2008-2146

wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages.

CVSS2: 7.5
3%
Низкий
около 18 лет назад
debian логотип
CVE-2008-2146

wp-includes/vars.php in Wordpress before 2.2.3 does not properly extra ...

CVSS2: 7.5
3%
Низкий
около 18 лет назад
ubuntu логотип
CVE-2008-2146

wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote attackers to bypass intended access restrictions for certain pages.

CVSS2: 7.5
3%
Низкий
около 18 лет назад
nvd логотип
CVE-2008-2068

Cross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS2: 4.3
2%
Низкий
около 18 лет назад
debian логотип
CVE-2008-2068

Cross-site scripting (XSS) vulnerability in WordPress 2.5 allows remot ...

CVSS2: 4.3
2%
Низкий
около 18 лет назад

Уязвимостей на страницу


Поделиться