Vulnerability database

4,612 results · page 93 of 93

• Oct 28, 2008the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5,: Directory traversalCVE-2008-4769 · WordPress plugins & themes · reported by MITREHigh 9.3

  Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from third party information.

  Product

  the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5,

  Affected

  up to 2.3.3

  What to do

  Affects up to 2.3.3. Update the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordsecunia.comtrac.wordpress.org

• Aug 27, 2008The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in CVE-2008-3747 · WordPress plugins & themes · reported by MITREHigh 7.5

  The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before 2.6.1 do not force SSL communication in the intended situations, which might allow remote attackers to gain administrative access by sniffing the network for a cookie.

  Fixed in

  2.6.1

  What to do

  Update the plugin to 2.6.1 or newer.

  Full record and what to do →NVD recordtrac.wordpress.orgopenwall.com

• May 21, 2008WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files: Unrestricted file uploadCVE-2008-2392 · WordPress plugins & themes · reported by MITREHigh 9

  Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard.

  Product

  WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files

  Affected

  up to 2.5.1

  What to do

  Affects up to 2.5.1. Update WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordsecurityreason.comsecurityfocus.com

• Apr 28, 2008The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers tCVE-2008-1930 · WordPress plugins & themes · reported by MITREHigh 7.5

  The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with "admin" to obtain administrator privileges, aka a "cryptographic splicing" issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013.

  What to do

  Update the plugin to the newest version.

  Full record and what to do →NVD recordsecunia.comwordpress.org

• Nov 19, 2007Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MDCVE-2007-6013 · WordPress plugins & themes · reported by MITRECritical 9.8

  Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.

  Affected

  up to 2.3.1

  What to do

  Affects up to 2.3.1. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordlists.grok.org.ukosvdb.org

• Aug 3, 2007Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) CVE-2007-4153 · WordPress plugins & themes · reported by MITRELow 2.1

  Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin Panel, accessed through options.php; or (2) the opml_url parameter to link-import.php. NOTE: this might not cross privilege boundaries in some configurations, since the Administrator role has the unfiltered_html capability.

  What to do

  Update the plugin to the newest version.

  Full record and what to do →NVD recordcodex.wordpress.orgmybeni.rootzilla.de

• Apr 9, 2007xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictionsCVE-2007-1893 · WordPress plugins & themes · reported by MITREMedium 4.9

  xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publish_posts functionality, which can be used to "publish a previously saved post."

  What to do

  Update the plugin to the newest version.

  Full record and what to do →NVD recordsecunia.comsecunia.com

• Mar 22, 2007wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirecCVE-2007-1599 · WordPress plugins & themes · reported by MITREMedium 6.5

  wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirect_to parameter.

  What to do

  Update the plugin to the newest version.

  Full record and what to do →NVD recordsecunia.comdebian.org

• Nov 21, 2006WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, which allows remote authenticated users to cCVE-2006-6017 · WordPress plugins & themes · reported by MITREMedium 6.5

  WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, which allows remote authenticated users to cause a denial of service (application crash) via a string that represents a (1) malformed or (2) large serialized object, because the object triggers automatic unserialization for display.

  Fixed in

  2.0.5

  What to do

  Update the plugin to 2.0.5 or newer.

  Full record and what to do →NVD recordbugs.gentoo.orgtrac.wordpress.org

• Nov 21, 2006wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.CVE-2006-6016 · WordPress plugins & themes · reported by MITREMedium 6.5

  wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter.

  Fixed in

  2.0.5

  What to do

  Update the plugin to 2.0.5 or newer.

  Full record and what to do →NVD recordbugs.gentoo.orgtrac.wordpress.org

• Nov 3, 2006Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitraCVE-2006-5705 · WordPress plugins & themes · reported by MITREMedium 6

  Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the (1) backup and (2) fragment parameters in a GET request.

  Fixed in

  2.0.5

  What to do

  Update the plugin to 2.0.5 or newer.

  Full record and what to do →NVD recordbugs.gentoo.orgmarkjaquith.wordpress.com

• Jun 1, 2005template-functions-category.php in WordPress 1.5.1: SQL injectionCVE-2005-1810 · WordPress plugins & themes · reported by MITREHigh 7.5

  SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.

  Product

  template-functions-category.php in WordPress 1.5.1

  What to do

  Update template-functions-category.php in WordPress 1.5.1 to the newest version.

  Full record and what to do →NVD recordbugs.gentoo.orgmarc.info

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.