Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

WordPress

WordPressсвободно распространяемая система управления содержимым сайта с открытым исходным кодом.

Релизный цикл, информация об уязвимостях

Продукт: WordPress
Вендор: Wordpress

График релизов

6.56.66.76.86.97.02024202520262027

Недавние уязвимости WordPress

Количество 1 906

nvd логотип

CVE-2005-2109

около 21 года назад

wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2005-1810

около 21 года назад

SQL injection vulnerability in template-functions-category.php in Word ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2005-1810

около 21 года назад

SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2005-1810

около 21 года назад

SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2005-1688

около 21 года назад

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive ...

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2005-1687

около 21 года назад

SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and e ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2005-1688

около 21 года назад

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2005-1688

около 21 года назад

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2005-1687

около 21 года назад

SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2005-1102

около 21 года назад

Multiple cross-site scripting (XSS) vulnerabilities in template-functi ...

CVSS2: 6.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2005-2109

wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.

CVSS2: 5
3%
Низкий
около 21 года назад
debian логотип
CVE-2005-1810

SQL injection vulnerability in template-functions-category.php in Word ...

CVSS2: 7.5
3%
Низкий
около 21 года назад
ubuntu логотип
CVE-2005-1810

SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.

CVSS2: 7.5
3%
Низкий
около 21 года назад
nvd логотип
CVE-2005-1810

SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.

CVSS2: 7.5
3%
Низкий
около 21 года назад
debian логотип
CVE-2005-1688

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive ...

CVSS3: 5.3
2%
Низкий
около 21 года назад
debian логотип
CVE-2005-1687

SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and e ...

CVSS2: 7.5
2%
Низкий
около 21 года назад
ubuntu логотип
CVE-2005-1688

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.

CVSS3: 5.3
2%
Низкий
около 21 года назад
nvd логотип
CVE-2005-1688

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.

CVSS3: 5.3
2%
Низкий
около 21 года назад
nvd логотип
CVE-2005-1687

SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter.

CVSS2: 7.5
2%
Низкий
около 21 года назад
debian логотип
CVE-2005-1102

Multiple cross-site scripting (XSS) vulnerabilities in template-functi ...

CVSS2: 6.8
3%
Низкий
около 21 года назад

Уязвимостей на страницу


Поделиться