WordPress — свободно распространяемая система управления содержимым сайта с открытым исходным кодом.
Релизный цикл, информация об уязвимостях
График релизов
Количество 1 906
CVE-2018-20153
In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS.
CVE-2018-20153
In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could mod ...
CVE-2018-20152
In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on post types via crafted input.
CVE-2018-20152
In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass i ...
CVE-2018-20151
In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler if an unusual configuration were chosen. The search engine could then index and display a user's e-mail address and (rarely) the password that was generated by default.
CVE-2018-20151
In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation pa ...
CVE-2018-20150
In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins.
CVE-2018-20150
In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could tri ...
CVE-2018-20149
In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data.
CVE-2018-20149
In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP S ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2018-20153 In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS. | CVSS3: 5.4 | 5% Низкий | около 7 лет назад |
| CVE-2018-20153 In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could mod ... | CVSS3: 5.4 | 5% Низкий | около 7 лет назад |
| CVE-2018-20152 In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on post types via crafted input. | CVSS3: 6.5 | 12% Средний | около 7 лет назад |
| CVE-2018-20152 In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass i ... | CVSS3: 6.5 | 12% Средний | около 7 лет назад |
| CVE-2018-20151 In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler if an unusual configuration were chosen. The search engine could then index and display a user's e-mail address and (rarely) the password that was generated by default. | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
| CVE-2018-20151 In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation pa ... | CVSS3: 7.5 | 7% Низкий | около 7 лет назад |
| CVE-2018-20150 In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins. | CVSS3: 6.1 | 7% Низкий | около 7 лет назад |
| CVE-2018-20150 In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could tri ... | CVSS3: 6.1 | 7% Низкий | около 7 лет назад |
| CVE-2018-20149 In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data. | CVSS3: 5.4 | 4% Низкий | около 7 лет назад |
| CVE-2018-20149 In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP S ... | CVSS3: 5.4 | 4% Низкий | около 7 лет назад |
Уязвимостей на страницу