Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
wordpress wordpress 1.3.1 vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2008-4671
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) prior to 2.6 allows remote malicious users to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.
Wordpress Wordpress Mu
Wordpress Wordpress Mu 1.2.3
Wordpress Wordpress Mu 1.2.2
Wordpress Wordpress Mu 1.3
Wordpress Wordpress Mu 1.3.1
Wordpress Wordpress Mu 1.0
1 EDB exploit
4.3
CVSSv2
CVE-2009-1030
Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) prior to 2.7 allows remote malicious users to inject arbitrary web script or HTML via the HTTP Host header.
Wordpress Wordpress Mu 1.5.1
Wordpress Wordpress Mu 1.3.3
Wordpress Wordpress Mu 1.0
Wordpress Wordpress Mu 2.6.3
Wordpress Wordpress Mu 1.2.5a
Wordpress Wordpress Mu 1.2.3
Wordpress Wordpress Mu 2.6.1
Wordpress Wordpress Mu 1.3.2
Wordpress Wordpress Mu 2.7
Wordpress Wordpress Mu 1.2
Wordpress Wordpress Mu 1.1
Wordpress Wordpress Mu 1.2.2
Wordpress Wordpress Mu 1.2.4
Wordpress Wordpress Mu
Wordpress Wordpress Mu 1.3
Wordpress Wordpress Mu 1.3.1
Wordpress Wordpress Mu 1.1.1
Wordpress Wordpress Mu 2.6.2
Wordpress Wordpress Mu 1.5
Wordpress Wordpress Mu 1.2.1
Wordpress Wordpress Mu 2.6.5
1 EDB exploit
6.4
CVSSv2
CVE-2008-0664
The XML-RPC implementation (xmlrpc.php) in WordPress prior to 2.3.3, when registration is enabled, allows remote malicious users to edit posts of other blog users via unknown vectors.
Wordpress Wordpress 2.0.11
Wordpress Wordpress 2.0
Wordpress Wordpress 2.1.1
Wordpress Wordpress 2.1.3 Rc2
Wordpress Wordpress 2.2.3
Wordpress Wordpress 2.0.2
Wordpress Wordpress 2.1
Wordpress Wordpress 2.0.10 Rc1
Wordpress Wordpress 2.0.6
Wordpress Wordpress 2.0.1
Wordpress Wordpress 2.0.4
Wordpress Wordpress 1.3.1
Wordpress Wordpress 2.2 Revision5003
Wordpress Wordpress 2.2
Wordpress Wordpress 1.2.1
Wordpress Wordpress 0.7
Wordpress Wordpress 2.1.3
Wordpress Wordpress 2.0.7
Wordpress Wordpress 2.1.2
Wordpress Wordpress 0.71
Wordpress Wordpress 2.0.5
Wordpress Wordpress 2.2.2
4.9
CVSSv2
CVE-2009-2334
wp-admin/admin.php in WordPress and WordPress MU prior to 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote malicious users to specify a configuration file in the page parameter to obtain sensitive information or mod...
Wordpress Wordpress 2.0.11
Wordpress Wordpress 1.2-mingus
Wordpress Wordpress 2.3.1
Wordpress Wordpress 2.0
Wordpress Wordpress 2.1.1
Wordpress Wordpress 2.1.3 Rc2
Wordpress Wordpress 2.2.3
Wordpress Wordpress 2.0.2
Wordpress Wordpress Mu 1.5.1
Wordpress Wordpress 1.2
Wordpress Wordpress Mu 1.3.3
Wordpress Wordpress 2.1
Wordpress Wordpress 2.0.10 Rc1
Wordpress Wordpress 1.5-strayhorn
Wordpress Wordpress 1.2-delta
Wordpress Wordpress 2.0.6
Wordpress Wordpress 1.0
Wordpress Wordpress 2.0.1
Wordpress Wordpress 2.0.4
Wordpress Wordpress 1.3.1
Wordpress Wordpress Mu 2.6.3
Wordpress Wordpress Mu 2.6
1 EDB exploit
5
CVSSv2
CVE-2009-2432
WordPress and WordPress MU prior to 2.8.1 allow remote malicious users to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message.
Wordpress Wordpress 2.0.11
Wordpress Wordpress 1.2-mingus
Wordpress Wordpress 2.3.1
Wordpress Wordpress 2.0
Wordpress Wordpress 2.1.1
Wordpress Wordpress 2.1.3 Rc2
Wordpress Wordpress 2.2.3
Wordpress Wordpress 2.0.2
Wordpress Wordpress Mu 1.5.1
Wordpress Wordpress 1.2
Wordpress Wordpress Mu 1.3.3
Wordpress Wordpress 2.1
Wordpress Wordpress 2.0.10 Rc1
Wordpress Wordpress 1.5-strayhorn
Wordpress Wordpress 1.2-delta
Wordpress Wordpress 2.0.6
Wordpress Wordpress 1.0
Wordpress Wordpress 2.0.1
Wordpress Wordpress 2.0.4
Wordpress Wordpress 1.3.1
Wordpress Wordpress Mu 2.6.3
Wordpress Wordpress Mu 2.6
7.5
CVSSv2
CVE-2008-2146
wp-includes/vars.php in Wordpress prior to 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remote malicious users to bypass intended access restrictions for certain pages.
Wordpress Wordpress 2.0.11
Wordpress Wordpress 2.0
Wordpress Wordpress 2.1.1
Wordpress Wordpress 2.1.3 Rc2
Wordpress Wordpress 2.0.2
Wordpress Wordpress 2.1
Wordpress Wordpress 2.0.10 Rc1
Wordpress Wordpress 1.5-strayhorn
Wordpress Wordpress 2.0.6
Wordpress Wordpress 2.0.1
Wordpress Wordpress 2.0.4
Wordpress Wordpress 1.3.1
Wordpress Wordpress 2.2 Revision5003
Wordpress Wordpress 0.711
Wordpress Wordpress 0.6.2.1
Wordpress Wordpress 1.4
Wordpress Wordpress 2.2
Wordpress Wordpress 1.2.1
Wordpress Wordpress 0.7
Wordpress Wordpress 2.1.3
Wordpress Wordpress 2.0.7
Wordpress Wordpress 2.2.0
4.3
CVSSv2
CVE-2008-3233
Cross-site scripting (XSS) vulnerability in WordPress prior to 2.6, SVN development versions only, allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Wordpress Wordpress 2.0.11
Wordpress Wordpress 2.0
Wordpress Wordpress 2.1.1
Wordpress Wordpress 2.1.3 Rc2
Wordpress Wordpress 2.2.3
Wordpress Wordpress 2.0.2
Wordpress Wordpress 2.1
Wordpress Wordpress 2.0.10 Rc1
Wordpress Wordpress 1.5-strayhorn
Wordpress Wordpress 2.0.6
Wordpress Wordpress 2.0.1
Wordpress Wordpress 2.0.4
Wordpress Wordpress 1.3.1
Wordpress Wordpress 2.2 Revision5003
Wordpress Wordpress 0.711
Wordpress Wordpress 0.6.2.1
Wordpress Wordpress 1.4
Wordpress Wordpress 2.2
Wordpress Wordpress 1.2.1
Wordpress Wordpress 0.7
Wordpress Wordpress 2.1.3
Wordpress Wordpress 2.0.7
1 EDB exploit
9.3
CVSSv2
CVE-2008-4769
Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and previous versions, and 2.5, allows remote malicious users to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of ...
Wordpress Wordpress 2.0.11
Wordpress Wordpress 1.2-mingus
Wordpress Wordpress 2.3.1
Wordpress Wordpress 2.0
Wordpress Wordpress 2.1.1
Wordpress Wordpress 2.1.3 Rc2
Wordpress Wordpress 2.2.3
Wordpress Wordpress 2.0.2
Wordpress Wordpress 1.2
Wordpress Wordpress 2.1
Wordpress Wordpress 2.0.10 Rc1
Wordpress Wordpress 1.5-strayhorn
Wordpress Wordpress 1.2-delta
Wordpress Wordpress 2.0.6
Wordpress Wordpress 2.0.1
Wordpress Wordpress 2.0.4
Wordpress Wordpress 1.3.1
Wordpress Wordpress 0.6.2.1
Wordpress Wordpress 0.71-gold
Wordpress Wordpress 2.2 Revision5003
Wordpress Wordpress 0.711
Wordpress Wordpress 1.4
1 EDB exploit
4.3
CVSSv2
CVE-2008-5278
Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress prior to 2.6.5 allows remote malicious users to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).
Wordpress Wordpress 2.0.11
Wordpress Wordpress 1.2-mingus
Wordpress Wordpress 2.3.1
Wordpress Wordpress 2.0
Wordpress Wordpress 2.1.1
Wordpress Wordpress 2.1.3 Rc2
Wordpress Wordpress 2.2.3
Wordpress Wordpress 2.0.2
Wordpress Wordpress 1.2
Wordpress Wordpress 2.1
Wordpress Wordpress 2.0.10 Rc1
Wordpress Wordpress 1.5-strayhorn
Wordpress Wordpress 1.2-delta
Wordpress Wordpress 2.0.6
Wordpress Wordpress 2.0.1
Wordpress Wordpress 2.0.4
Wordpress Wordpress 1.3.1
Wordpress Wordpress 0.6.2.1
Wordpress Wordpress 0.71-gold
Wordpress Wordpress 2.2 Revision5003
Wordpress Wordpress 0.711
Wordpress Wordpress 1.4
6
CVSSv2
CVE-2019-15092
The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CSV file created by the WF_CustomerImpExpCsv_Exporter class.
Webtoffee Import Export Wordpress Users
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5834
CVE-2024-30100
CVE-2024-4577
physical
dos
CVE-2024-30099
CVE-2024-27801
CVE-2024-32146
logic flaw
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »