Количество 1 912
Количество 1 912
CVE-2019-16780
WordPress users with lower privileges (like contributors) can inject JavaScript code in the block editor using a specific payload, which is executed within the dashboard. This can lead to XSS if an admin opens the post in the editor. Execution of this attack does require an authenticated user. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release. Automatic updates are enabled by default for minor releases and we strongly recommend that you keep them enabled.
CVE-2019-16780
WordPress users with lower privileges (like contributors) can inject J ...
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users.
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users.
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated us ...
CVE-2019-16222
WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks.
CVE-2019-16222
WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks.
CVE-2019-16222
WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_b ...
CVE-2019-16221
WordPress before 5.2.3 allows reflected XSS in the dashboard.
CVE-2019-16221
WordPress before 5.2.3 allows reflected XSS in the dashboard.
CVE-2019-16221
WordPress before 5.2.3 allows reflected XSS in the dashboard.
CVE-2019-16220
In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash.
CVE-2019-16220
In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash.
CVE-2019-16220
In WordPress before 5.2.3, validation and sanitization of a URL in wp_ ...
CVE-2019-16219
WordPress before 5.2.3 allows XSS in shortcode previews.
CVE-2019-16219
WordPress before 5.2.3 allows XSS in shortcode previews.
CVE-2019-16219
WordPress before 5.2.3 allows XSS in shortcode previews.
CVE-2019-16218
WordPress before 5.2.3 allows XSS in stored comments.
CVE-2019-16218
WordPress before 5.2.3 allows XSS in stored comments.
CVE-2019-16218
WordPress before 5.2.3 allows XSS in stored comments.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-16780 WordPress users with lower privileges (like contributors) can inject JavaScript code in the block editor using a specific payload, which is executed within the dashboard. This can lead to XSS if an admin opens the post in the editor. Execution of this attack does require an authenticated user. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release. Automatic updates are enabled by default for minor releases and we strongly recommend that you keep them enabled. | CVSS3: 5.8 | 2% Низкий | больше 6 лет назад |
| CVE-2019-16780 WordPress users with lower privileges (like contributors) can inject J ... | CVSS3: 5.8 | 2% Низкий | больше 6 лет назад |
 | CVE-2019-16223 WordPress before 5.2.3 allows XSS in post previews by authenticated users. | CVSS3: 5.4 | 5% Низкий | почти 7 лет назад |
| CVE-2019-16223 WordPress before 5.2.3 allows XSS in post previews by authenticated users. | CVSS3: 5.4 | 5% Низкий | почти 7 лет назад |
| CVE-2019-16223 WordPress before 5.2.3 allows XSS in post previews by authenticated us ... | CVSS3: 5.4 | 5% Низкий | почти 7 лет назад |
| CVE-2019-16222 WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16222 WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16222 WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_b ... | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16221 WordPress before 5.2.3 allows reflected XSS in the dashboard. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16221 WordPress before 5.2.3 allows reflected XSS in the dashboard. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16221 WordPress before 5.2.3 allows reflected XSS in the dashboard. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16220 In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash. | CVSS3: 6.1 | 3% Низкий | почти 7 лет назад |
| CVE-2019-16220 In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash. | CVSS3: 6.1 | 3% Низкий | почти 7 лет назад |
| CVE-2019-16220 In WordPress before 5.2.3, validation and sanitization of a URL in wp_ ... | CVSS3: 6.1 | 3% Низкий | почти 7 лет назад |
| CVE-2019-16219 WordPress before 5.2.3 allows XSS in shortcode previews. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16219 WordPress before 5.2.3 allows XSS in shortcode previews. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16219 WordPress before 5.2.3 allows XSS in shortcode previews. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16218 WordPress before 5.2.3 allows XSS in stored comments. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16218 WordPress before 5.2.3 allows XSS in stored comments. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
| CVE-2019-16218 WordPress before 5.2.3 allows XSS in stored comments. | CVSS3: 6.1 | 2% Низкий | почти 7 лет назад |
Уязвимостей на страницу