WordPress — свободно распространяемая система управления содержимым сайта с открытым исходным кодом.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 896
CVE-2018-20153
In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS.
CVE-2018-20153
In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could mod ...
CVE-2018-20152
In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on post types via crafted input.
CVE-2018-20152
In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass i ...
CVE-2018-20151
In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler if an unusual configuration were chosen. The search engine could then index and display a user's e-mail address and (rarely) the password that was generated by default.
CVE-2018-20151
In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation pa ...
CVE-2018-20150
In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins.
CVE-2018-20150
In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could tri ...
CVE-2018-20149
In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data.
CVE-2018-20149
In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP S ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2018-20153 In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS. | CVSS3: 5.4 | 5% Низкий | почти 7 лет назад |
| CVE-2018-20153 In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could mod ... | CVSS3: 5.4 | 5% Низкий | почти 7 лет назад |
| CVE-2018-20152 In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on post types via crafted input. | CVSS3: 6.5 | 12% Средний | почти 7 лет назад |
| CVE-2018-20152 In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass i ... | CVSS3: 6.5 | 12% Средний | почти 7 лет назад |
| CVE-2018-20151 In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler if an unusual configuration were chosen. The search engine could then index and display a user's e-mail address and (rarely) the password that was generated by default. | CVSS3: 7.5 | 7% Низкий | почти 7 лет назад |
| CVE-2018-20151 In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation pa ... | CVSS3: 7.5 | 7% Низкий | почти 7 лет назад |
| CVE-2018-20150 In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins. | CVSS3: 6.1 | 7% Низкий | почти 7 лет назад |
| CVE-2018-20150 In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could tri ... | CVSS3: 6.1 | 7% Низкий | почти 7 лет назад |
| CVE-2018-20149 In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data. | CVSS3: 5.4 | 4% Низкий | почти 7 лет назад |
| CVE-2018-20149 In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP S ... | CVSS3: 5.4 | 4% Низкий | почти 7 лет назад |
Уязвимостей на страницу