WordPress Vulnerabilities

Published
Title
Published
2014-11-25
Title
WordPress <= 4.0 - CSRF in wp-login.php Password Reset
Published
2014-11-20
Title
WordPress <= 4.0 - Long Password Denial of Service (DoS)
Published
2014-11-20
Title
WordPress 3.0-3.9.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Published
2014-09-17
Title
WordPress 3.4.2 - 3.9.2 Does Not Invalidate Sessions Upon Logout
Published
2014-09-16
Title
WordPress 3.6 - 3.9.1 XXE in GetID3 Library
Published
2014-09-16
Title
WordPress 3.0 - 3.9.1 Authenticated Cross-Site Scripting (XSS) in Multisite
Published
2014-09-16
Title
WordPress 2.0.3 - 3.9.1 (except 3.7.4 / 3.8.4) CSRF Token Brute Forcing
Published
2014-09-16
Title
WordPress 3.9 & 3.9.1 Unlikely Code Execution
Published
2014-08-27
Title
WordPress 3.5-3.7.1 - XML-RPC Denial of Service
Published
2014-08-01
Title
WordPress 1.5 template-functions-post.php Multiple Field XSS
Published
2014-08-01
Title
WordPress 1.5 wp-trackback.php tb_id Parameter SQL Injection
Published
2014-08-01
Title
Wordpress 1.5.1 - 2.0.2 wp-register.php Multiple Parameter XSS
Published
2014-08-01
Title
WordPress 2.0.2 - 2.0.4 Paged Parameter SQL Injection
Published
2014-08-01
Title
Wordpress 2.0.5 Trackback UTF-7 Remote SQL Injection Exploit
Published
2014-08-01
Title
Wordpress <= 2.0.6 wp-trackback.php Remote SQL Injection Exploit
Published
2014-08-01
Title
WordPress 2.1.1 - Command Execution Backdoor
Published
2014-08-01
Title
WordPress 'year' Cross-Site Scripting (XSS)
Published
2014-08-01
Title
Wordpress 2.1.3 admin-ajax.php SQL Injection Blind Fishing Exploit
Published
2014-08-01
Title
WordPress 2.2 (wp-app.php) Arbitrary File Upload Exploit
Published
2014-08-01
Title
WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass
Published
2014-08-01
Title
WordPress 2.0 - 3.0 Remote Authenticated Administrator Add Action Bypass
Published
2014-08-01
Title
WordPress 2.0 - 3.0.1 wp-includes/capabilities.php Remote Authenticated Administrator Delete Action Bypass
Published
2014-08-01
Title
WordPress 2.0 - 3.0.1 Cross-Site Scripting (XSS) in wp-admin/plugins.php
Published
2014-08-01
Title
WordPress 2.0 - 3.0.1 Multiple Cross-Site Scripting (XSS) in request_filesystem_credentials()
Published
2014-08-01
Title
WordPress 2.0 - 3.0.1 wp-includes/comment.php Bypass Spam Restrictions