WordPress Vulnerabilities

Published
Title
Published
2016-05-06
Title
WordPress <= 4.5.1 - Pupload Same Origin Method Execution (SOME)
Published
2016-05-06
Title
WordPress 4.2-4.5.1 - MediaElement.js Reflected Cross-Site Scripting (XSS)
Published
2016-04-12
Title
WordPress <= 4.4.2 - Script Compression Option CSRF
Published
2016-04-12
Title
WordPress <= 4.4.2 - Reflected XSS in Network Settings
Published
2016-04-12
Title
WordPress <= 4.4.2 - SSRF Bypass using Octal & Hexedecimal IP addresses
Published
2016-02-02
Title
WordPress 3.7-4.4.1 - Open Redirect
Published
2016-02-02
Title
WordPress 3.7-4.4.1 - Local URIs Server Side Request Forgery (SSRF)
Published
2016-01-06
Title
WordPress 3.7-4.4 - Authenticated Cross-Site Scripting (XSS)
Published
2015-09-15
Title
WordPress <= 4.3 - Publish Post & Mark as Sticky Permission Issue
Published
2015-09-15
Title
WordPress <= 4.3 - User List Table Cross-Site Scripting (XSS)
Published
2015-09-15
Title
WordPress <= 4.3 - Authenticated Shortcode Tags Cross-Site Scripting (XSS)
Published
2015-08-05
Title
WordPress <= 4.2.3 - Legacy Theme Preview Cross-Site Scripting (XSS)
Published
2015-08-05
Title
WordPress <= 4.2.3 - Nav Menu Title Cross-Site Scripting (XSS)
Published
2015-08-05
Title
WordPress <= 4.2.3 - Widgets Title Cross-Site Scripting (XSS)
Published
2015-08-05
Title
WordPress <= 4.2.3 - Timing Side Channel Attack
Published
2015-08-04
Title
WordPress <= 4.2.3 - wp_untrash_post_comments SQL Injection
Published
2015-07-23
Title
WordPress <= 4.2.2 - Authenticated Stored Cross-Site Scripting (XSS)
Published
2015-06-10
Title
WordPress 4.1 - 4.1.1 - Arbitrary File Upload
Published
2015-05-05
Title
WordPress 4.1-4.2.1 - Unauthenticated Genericons Cross-Site Scripting (XSS)
Published
2015-04-26
Title
WordPress <= 4.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Published
2015-04-21
Title
WordPress 3.9-4.1.1 - Same-Origin Method Execution
Published
2015-04-21
Title
WordPress <= 4.1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Published
2015-02-03
Title
WordPress <= 1.5.1.2 - XML-RPC SQL Injection
Published
2014-11-30
Title
WordPress 3.9, 3.9.1, 3.9.2, 4.0 - XSS in Media Playlists
Published
2014-11-30
Title
WordPress <= 4.0 - Server Side Request Forgery (SSRF)