Логотип exploitDog
product: "wordpress"
Консоль
Логотип exploitDog

exploitDog

product: "wordpress"
Поиск уязвимостей по источнику БДУ ФСТЭК

БДУ ФСТЭК

Поиск уязвимостей по источнику Microsoft MSRC

Microsoft MSRC

Поиск уязвимостей по источнику NVD

NVD

Поиск уязвимостей по источнику Oracle ELSA

Oracle ELSA

Поиск уязвимостей по источнику Red Hat CVE

Red Hat CVE

Поиск уязвимостей по источнику РЕД ОС

РЕД ОС

Поиск уязвимостей по источнику Rocky RLSA

Rocky RLSA

Поиск уязвимостей по источнику SUSE CVRF

SUSE CVRF

Поиск уязвимостей по источнику Ubuntu

Ubuntu

Поиск уязвимостей по источнику Debian

Debian

Поиск уязвимостей по источнику Github

Github

Количество 1 906

Количество 1 906

debian логотип

CVE-2016-1564

больше 9 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/cla ...

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2016-10148

около 9 лет назад

The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to wp-admin/admin-ajax.php, a related issue to CVE-2016-6896.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2016-10148

около 9 лет назад

The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to wp-admin/admin-ajax.php, a related issue to CVE-2016-6896.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2016-10148

около 9 лет назад

The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.p ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2015-8834

больше 9 лет назад

Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2015-8834

больше 9 лет назад

Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2015-8834

больше 9 лет назад

Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in W ...

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2015-7989

больше 9 лет назад

Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2015-7989

больше 9 лет назад

Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2015-7989

больше 9 лет назад

Cross-site scripting (XSS) vulnerability in the user list table in Wor ...

CVSS3: 5.4
EPSS: Низкий
ubuntu логотип

CVE-2015-5734

около 10 лет назад

Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2015-5734

около 10 лет назад

Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2015-5734

около 10 лет назад

Cross-site scripting (XSS) vulnerability in the legacy theme preview i ...

CVSS2: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2015-5733

около 10 лет назад

Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via an accessibility-helper title.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2015-5733

около 10 лет назад

Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via an accessibility-helper title.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2015-5733

около 10 лет назад

Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessi ...

CVSS2: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2015-5732

около 10 лет назад

Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2015-5732

около 10 лет назад

Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2015-5732

около 10 лет назад

Cross-site scripting (XSS) vulnerability in the form function in the W ...

CVSS2: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2015-5731

около 10 лет назад

Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post, and consequently cause a denial of service (editing blockage), via a get-post-lock action.

CVSS2: 6.8
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
debian логотип
CVE-2016-1564

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/cla ...

CVSS3: 6.1
1%
Низкий
больше 9 лет назад
ubuntu логотип
CVE-2016-10148

The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to wp-admin/admin-ajax.php, a related issue to CVE-2016-6896.

CVSS3: 4.3
0%
Низкий
около 9 лет назад
nvd логотип
CVE-2016-10148

The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to wp-admin/admin-ajax.php, a related issue to CVE-2016-6896.

CVSS3: 4.3
0%
Низкий
около 9 лет назад
debian логотип
CVE-2016-10148

The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.p ...

CVSS3: 4.3
0%
Низкий
около 9 лет назад
ubuntu логотип
CVE-2015-8834

Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.

CVSS3: 6.1
1%
Низкий
больше 9 лет назад
nvd логотип
CVE-2015-8834

Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.

CVSS3: 6.1
1%
Низкий
больше 9 лет назад
debian логотип
CVE-2015-8834

Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in W ...

CVSS3: 6.1
1%
Низкий
больше 9 лет назад
ubuntu логотип
CVE-2015-7989

Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.

CVSS3: 5.4
0%
Низкий
больше 9 лет назад
nvd логотип
CVE-2015-7989

Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.

CVSS3: 5.4
0%
Низкий
больше 9 лет назад
debian логотип
CVE-2015-7989

Cross-site scripting (XSS) vulnerability in the user list table in Wor ...

CVSS3: 5.4
0%
Низкий
больше 9 лет назад
ubuntu логотип
CVE-2015-5734

Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string.

CVSS2: 4.3
3%
Низкий
около 10 лет назад
nvd логотип
CVE-2015-5734

Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string.

CVSS2: 4.3
3%
Низкий
около 10 лет назад
debian логотип
CVE-2015-5734

Cross-site scripting (XSS) vulnerability in the legacy theme preview i ...

CVSS2: 4.3
3%
Низкий
около 10 лет назад
ubuntu логотип
CVE-2015-5733

Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via an accessibility-helper title.

CVSS2: 4.3
2%
Низкий
около 10 лет назад
nvd логотип
CVE-2015-5733

Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via an accessibility-helper title.

CVSS2: 4.3
2%
Низкий
около 10 лет назад
debian логотип
CVE-2015-5733

Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessi ...

CVSS2: 4.3
2%
Низкий
около 10 лет назад
ubuntu логотип
CVE-2015-5732

Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title.

CVSS2: 4.3
2%
Низкий
около 10 лет назад
nvd логотип
CVE-2015-5732

Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title.

CVSS2: 4.3
2%
Низкий
около 10 лет назад
debian логотип
CVE-2015-5732

Cross-site scripting (XSS) vulnerability in the form function in the W ...

CVSS2: 4.3
2%
Низкий
около 10 лет назад
ubuntu логотип
CVE-2015-5731

Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers to hijack the authentication of administrators for requests that lock a post, and consequently cause a denial of service (editing blockage), via a get-post-lock action.

CVSS2: 6.8
15%
Средний
около 10 лет назад

Уязвимостей на страницу