WordPress — свободно распространяемая система управления содержимым сайта с открытым исходным кодом.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 914
CVE-2008-1304
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php.
CVE-2008-1304
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php.
CVE-2008-0664
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, whe ...
CVE-2008-0664
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
CVE-2008-0664
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
CVE-2008-0664
The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
CVE-2008-0195
WordPress 2.0.11 and earlier allows remote attackers to obtain sensiti ...
CVE-2008-0193
Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPr ...
CVE-2008-0194
Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0 ...
CVE-2008-0192
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2008-1304 Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php. | CVSS2: 4.3 | 5% Низкий | больше 18 лет назад |
 | CVE-2008-1304 Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php. | 5% Низкий | больше 18 лет назад | |
| CVE-2008-0664 The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, whe ... | CVSS2: 6.4 | 4% Низкий | больше 18 лет назад |
 | CVE-2008-0664 The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors. | CVSS2: 6.4 | 4% Низкий | больше 18 лет назад |
| CVE-2008-0664 The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors. | CVSS2: 6.4 | 4% Низкий | больше 18 лет назад |
| CVE-2008-0664 The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors. | 4% Низкий | больше 18 лет назад | |
| CVE-2008-0195 WordPress 2.0.11 and earlier allows remote attackers to obtain sensiti ... | CVSS2: 5 | 3% Низкий | больше 18 лет назад |
| CVE-2008-0193 Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPr ... | CVSS2: 4.3 | 4% Низкий | больше 18 лет назад |
| CVE-2008-0194 Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0 ... | CVSS2: 7.5 | 4% Низкий | больше 18 лет назад |
| CVE-2008-0192 Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 ... | CVSS2: 4.3 | 5% Низкий | больше 18 лет назад |
Уязвимостей на страницу