Vulnerability database

1,126 results · page 23 of 23

• Nov 17, 2009wp-admin/press-this.php in WordPress before 2.8.6: Cross-site scripting (XSS)CVE-2009-3891 · WordPress plugins & themes · reported by Red HatLow 3.5

  Cross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter (aka the selection variable).

  Product

  wp-admin/press-this.php in WordPress before 2.8.6

  Fixed in

  2.8.6

  What to do

  Update wp-admin/press-this.php in WordPress before 2.8.6 to 2.8.6 or newer.

  Full record and what to do →NVD recordcore.trac.wordpress.orgcore.trac.wordpress.org

• Sep 8, 2009wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for: Cross-site scripting (XSS)CVE-2008-7175 · WordPress plugins & themes · reported by MITREMedium 4.3

  Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.

  Product

  wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for

  Affected

  up to 0.96

  What to do

  Affects up to 0.96. Update wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordosvdb.orgsecurityfocus.com

• Aug 18, 2009Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advancCVE-2009-2853 · WordPress plugins & themes · reported by MITREHigh 10

  Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/.

  Fixed in

  2.8.3

  What to do

  Update the plugin to 2.8.3 or newer.

  Full record and what to do →NVD recordcore.trac.wordpress.orgcore.trac.wordpress.org

• Aug 18, 2009the administrator interface in WordPress before 2.8.2: Cross-site scripting (XSS)CVE-2009-2851 · WordPress plugins & themes · reported by MITREMedium 4.3

  Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL.

  Product

  the administrator interface in WordPress before 2.8.2

  Fixed in

  2.8.2

  What to do

  Update the administrator interface in WordPress before 2.8.2 to 2.8.2 or newer.

  Full record and what to do →NVD recordbugs.gentoo.orgsecuritytracker.com

• Aug 13, 2009wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, viCVE-2009-2762 · WordPress plugins & themes · reported by MITREHigh 7.5

  wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array variable in a resetpass (aka rp) action, which bypasses a check that assumes that $key is not an array.

  Affected

  up to 2.8.3

  What to do

  Affects up to 2.8.3. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordarchives.neohapsis.comcore.trac.wordpress.org

• Jul 10, 2009wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which alloCVE-2009-2334 · WordPress plugins & themes · reported by MITREMedium 4.9

  wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstrated by the (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service.

  Fixed in

  2.8.1

  What to do

  Update the plugin to 2.8.1 or newer.

  Full record and what to do →NVD recordcorelabs.coresecurity.comsecuritytracker.com

• Apr 28, 2009wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outagCVE-2008-6767 · WordPress plugins & themes · reported by MITREHigh 10

  wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cause a denial of service (application outage), via a direct request.

  What to do

  Update the plugin to the newest version.

  Full record and what to do →NVD recordarchives.neohapsis.comdebian.org

• Apr 28, 2009wp-admin/upgrade.php in WordPress, probably 2.6.x,: Open redirectCVE-2008-6762 · WordPress plugins & themes · reported by MITREMedium 4.3

  Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backto parameter.

  Product

  wp-admin/upgrade.php in WordPress, probably 2.6.x,

  What to do

  Update wp-admin/upgrade.php in WordPress, probably 2.6.x, to the newest version.

  Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org

• Dec 19, 2008wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remoteCVE-2008-5695 · WordPress plugins & themes · reported by MITREHigh 8.5

  wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manage_options and upload_files capabilities to execute arbitrary code by uploading a PHP script and adding this script's pathname to active_plugins.

  Affected

  up to 2.3.2

  Fixed in

  1.3.2

  What to do

  Update the plugin to 1.3.2 or newer.

  Full record and what to do →NVD recordmu.wordpress.orgsecunia.com

• Oct 22, 2008wp-admin/wp-blogs.php in Wordpress MU: Cross-site scripting (XSS)CVE-2008-4671 · WordPress plugins & themes · reported by MITREMedium 4.3

  Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.

  Product

  wp-admin/wp-blogs.php in Wordpress MU

  Fixed in

  2.6

  What to do

  Update wp-admin/wp-blogs.php in Wordpress MU to 2.6 or newer.

  Full record and what to do →NVD recordlists.grok.org.uksecunia.com

• May 21, 2008WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files: Unrestricted file uploadCVE-2008-2392 · WordPress plugins & themes · reported by MITREHigh 9

  Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

  Product

  WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files

  Affected

  up to 2.5.1

  What to do

  Affects up to 2.5.1. Update WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordsecurityreason.comsecurityfocus.com

• Feb 11, 2008Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to injecCVE-2008-0691 · WordPress plugins & themes · reported by MITREMedium 4.3

  Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) wp_footnotes_current_settings[priority], (2) wp_footnotes_current_settings[style_rules], (3) wp_footnotes_current_settings[pre_footnotes], and (4) wp_footnotes_current_settings[post_footnotes] parameters.

  What to do

  Update the plugin to the newest version.

  Full record and what to do →NVD recordsecunia.comsecurityreason.com

• Feb 6, 2008the administration panel in the DMSGuestbook 1.7.0 plugin for: SQL injectionCVE-2008-0616 · WordPress plugins & themes · reported by MITREMedium 6.5

  SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

  Product

  the administration panel in the DMSGuestbook 1.7.0 plugin for

  Affected

  1.7.0 to 1.7.0

  What to do

  Affects 1.7.0 to 1.7.0. Update the administration panel in the DMSGuestbook 1.7.0 plugin for to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordsecurityreason.comsecurityfocus.com

• Feb 6, 2008wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for: Directory traversalCVE-2008-0615 · WordPress plugins & themes · reported by MITREMedium 4

  Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) folder and (2) file parameters.

  Product

  wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for

  What to do

  Update wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for to the newest version.

  Full record and what to do →NVD recordsecunia.comsecurityreason.com

• Jan 9, 2008Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow remote attackers toCVE-2008-0203 · WordPress plugins & themes · reported by MITREMedium 4.3

  Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cryptwidth, (2) cryptheight, (3) bgimg, (4) charR, (5) charG, (6) charB, (7) charclear, (8) tfont, (9) charel, (10) charelc, (11) charelv, (12) charnbmin, (13) charnbmax, (14) charspace, (15) charsizemin, (16) charsizemax, (17) charanglemax, (18) noisepxmin, (19) noisepxmax, (20) noiselinemin, (21) noiselinemax, (22) nbcirclemin, (23) nbcirclemax, or (24) brushsize parameter to wp-admin/options-general.php.

  Affected

  up to 1.2

  What to do

  Affects up to 1.2. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordlists.grok.org.uksecurityreason.com

• Oct 30, 2007wp-admin/edit-post-rows.php in WordPress 2.3: Cross-site scripting (XSS)CVE-2007-5710 · WordPress plugins & themes · reported by MITRELow 2.6

  Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the posts_columns array parameter.

  Product

  wp-admin/edit-post-rows.php in WordPress 2.3

  What to do

  Update wp-admin/edit-post-rows.php in WordPress 2.3 to the newest version.

  Full record and what to do →NVD recordosvdb.orgsecunia.com

• Sep 14, 2007wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a does not properly verify the unfiltered_html privilege, whichCVE-2007-4893 · WordPress plugins & themes · reported by MITREMedium 4.3

  wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a does not properly verify the unfiltered_html privilege, which allows remote attackers to conduct cross-site scripting (XSS) attacks via modified data to (1) post.php or (2) page.php with a no_filter field.

  Fixed in

  2.2.3

  What to do

  Update the plugin to 2.2.3 or newer.

  Full record and what to do →NVD recordfedoranews.orgsecunia.com

• Aug 3, 2007Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) CVE-2007-4153 · WordPress plugins & themes · reported by MITRELow 2.1

  Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin Panel, accessed through options.php; or (2) the opml_url parameter to link-import.php. NOTE: this might not cross privilege boundaries in some configurations, since the Administrator role has the unfiltered_html capability.

  What to do

  Update the plugin to the newest version.

  Full record and what to do →NVD recordcodex.wordpress.orgmybeni.rootzilla.de

• May 22, 2007wp-admin/admin-ajax.php in WordPress before 2.2: SQL injectionCVE-2007-2821 · WordPress plugins & themes · reported by MITREHigh 7.5

  SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitrary SQL commands via the cookie parameter.

  Product

  wp-admin/admin-ajax.php in WordPress before 2.2

  Fixed in

  2.2

  What to do

  Update wp-admin/admin-ajax.php in WordPress before 2.2 to 2.2 or newer.

  Full record and what to do →NVD recordosvdb.orgsecunia.com

• Mar 28, 2007an mt import in wp-admin/admin.php in WordPress 2.1.2: Cross-site scripting (XSS)CVE-2007-1732 · WordPress plugins & themes · reported by MITRELow 3.5

  Cross-site scripting (XSS) vulnerability in an mt import in wp-admin/admin.php in WordPress 2.1.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the demo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: another researcher disputes this issue, stating that this is legitimate functionality for administrators. However, it has been patched by at least one vendor

  Product

  an mt import in wp-admin/admin.php in WordPress 2.1.2

  What to do

  Update an mt import in wp-admin/admin.php in WordPress 2.1.2 to the newest version.

  Full record and what to do →NVD recordcodex.wordpress.orgmarc.info

• Mar 22, 2007wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in the 2.1 series,: Cross-site scripting (XSS)CVE-2007-1622 · WordPress plugins & themes · reported by MITREMedium 4.3

  Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in the 2.1 series, allows remote authenticated users with theme privileges to inject arbitrary web script or HTML via the PATH_INFO in the administration interface, related to loose regular expression processing of PHP_SELF.

  Product

  wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in the 2.1 series,

  Fixed in

  2.0.10

  What to do

  Update wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in the 2.1 series, to 2.0.10 or newer.

  Full record and what to do →NVD recordsecunia.comsecunia.com

• Mar 10, 2007WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error messCVE-2007-1409 · WordPress plugins & themes · reported by MITREMedium 5

  WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error message.

  What to do

  Update the plugin to the newest version.

  Full record and what to do →NVD recordsecunia.comgentoo.org

• Mar 3, 2007the AdminPanel in WordPress 2.1.1 and earlier: Cross-site request forgery (CSRF)CVE-2007-1244 · WordPress plugins & themes · reported by MITREMedium 6.8

  Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileged actions as administrators, as demonstrated using the delete action in wp-admin/post.php. NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks and steal cookies via the post parameter.

  Product

  the AdminPanel in WordPress 2.1.1 and earlier

  Affected

  up to 2.1.1

  What to do

  Affects up to 2.1.1. Update the AdminPanel in WordPress 2.1.1 and earlier to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org

• Dec 28, 2006wp-admin/templates.php in WordPress 2.0.5: Cross-site scripting (XSS)CVE-2006-6808 · WordPress plugins & themes · reported by MITREMedium 6.8

  Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: some sources have reported this as a vulnerability in the get_file_description function in wp-admin/admin-functions.php.

  Product

  wp-admin/templates.php in WordPress 2.0.5

  What to do

  Update wp-admin/templates.php in WordPress 2.0.5 to the newest version.

  Full record and what to do →NVD recordmarc.infomichaeldaw.org

• Nov 21, 2006wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.CVE-2006-6016 · WordPress plugins & themes · reported by MITREMedium 6.5

  wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.

  Fixed in

  2.0.5

  What to do

  Update the plugin to 2.0.5 or newer.

  Full record and what to do →NVD recordbugs.gentoo.orgtrac.wordpress.org

• Jul 6, 2006WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-contentCVE-2006-3390 · WordPress plugins & themes · reported by MITREMedium 5

  WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, possibly due to uninitialized variables.

  What to do

  Update the plugin to the newest version.

  Full record and what to do →NVD recordsecunia.comsecunia.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.