Zaloguj się
Deutsch English Español Polski
Średnia

SWFUpload <= 2.2.0.1 - Cross-Site Scripting

  • Ujawniono: 20.04.2012
  • Aktualizacja: 11.10.2026 10:22

Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function.

Czego dotyczy

Kliknij technologię, aby zobaczyć wszystkie dotyczące jej podatności.

PlatformaPaczkaPodatne wersjePoprawka w wersji
WordPress (rdzeń) WordPress < 3.3.2 3.3.2
Wtyczka WordPress apptha-banner wszystkie wersje brak poprawki
Wtyczka WordPress apptha-slider-gallery wszystkie wersje brak poprawki
Wtyczka WordPress Blaze Slideshow <= 2.4 2.6
Wtyczka WordPress Comment Extra Fields <= 1.7 brak poprawki
Wtyczka WordPress dm-albums wszystkie wersje brak poprawki
Wtyczka WordPress Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 2.12 2.12
Wtyczka WordPress fluid-accessible-pager wszystkie wersje brak poprawki
Wtyczka WordPress fluid-accessible-rich-inline-edit wszystkie wersje brak poprawki
Wtyczka WordPress fluid-accessible-ui-options wszystkie wersje brak poprawki
Wtyczka WordPress fluid-accessible-uploader wszystkie wersje brak poprawki
Wtyczka WordPress fresh-page wszystkie wersje brak poprawki
Wtyczka WordPress mac-dock-gallery < 3.0 3.0
Wtyczka WordPress mac-dock-photogallery <= 1.0 brak poprawki
Wtyczka WordPress Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 1.9.6 1.9.7
Wtyczka WordPress PDF File Browser wszystkie wersje brak poprawki
Wtyczka WordPress PICA Photo Gallery wszystkie wersje brak poprawki
Wtyczka WordPress Power Zoomer <= 2.1 2.3
Wtyczka WordPress slide-show-pro <= 2.3 2.4
Wtyczka WordPress Smart Slideshow <= 2.3 2.4
Wtyczka WordPress Spotlight < 4.4 4.4
Wtyczka WordPress sprapid wszystkie wersje brak poprawki
Wtyczka WordPress Ultimate TinyMCE <= 3.5 3.6
Wtyczka WordPress wp-3dbanner-rotator <= 2.1 2.2
Wtyczka WordPress 3D Flick Slideshow <= 2.2 2.3
Wtyczka WordPress wp-bliss-gallery < 2.3 2.3
Wtyczka WordPress wp-carouselslideshow <= 3.10 3.11
Wtyczka WordPress wp-dreamworkgallery <= 2.2 2.3
Wtyczka WordPress wp-ecommerce-cvs-importer wszystkie wersje brak poprawki
Wtyczka WordPress wp-extended wszystkie wersje brak poprawki
Wtyczka WordPress wp-flipslideshow <= 2.1 2.2
Wtyczka WordPress Homepage SlideShow <= 2.2 2.3
Wtyczka WordPress Image News Slider <= 3.4 3.5
Wtyczka WordPress Levo Slideshow <= 2.2 2.3
Wtyczka WordPress wp-matrix-gallery <= 2.2 2.3
Wtyczka WordPress Powerplay Gallery < 3.2 3.2
Wtyczka WordPress wp-royal-gallery <= 2.0 2.1
Wtyczka WordPress wp-superb-slideshow <= 2.3 2.4
Wtyczka WordPress wp-vertical-gallery <= 2.2 2.3
Wtyczka WordPress wp-yasslideshow <= 3.3 3.4
Wtyczka WordPress MailPoet Newsletters (Previous) <= 2.1.6 2.1.7

Odnośniki

Ocena CVSS 6.1/10
Wektor CVSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Słabość (CWE)
CWE-79
Platforma
WordPress
Paczka
WordPress, apptha-banner, apptha-slider-gallery
Ujawniono
20.04.2012
Aktualizacja
11.10.2026 10:22

Źródła i licencje

Wordfence Intelligence - 4ecf04a7-1f3c-41d6-a86b-282f020de088 - Wordfence Intelligence

Wordfence Intelligence - 87333eee-36ae-4272-b300-7352eb133745 - Wordfence Intelligence

Wordfence Intelligence - d311aab4-fca8-4e83-83cf-c4b8350d7dd1 - Wordfence Intelligence

Copyright 1999-2026 The MITRE Corporation

Copyright 2012-2026 Defiant Inc.

This record contains material that is subject to copyright

Copyright 1999-2026 The MITRE Corporation

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

https://www.cve.org/Legal/TermsOfUse
Copyright 2012-2026 Defiant Inc.

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Copyright 1999-2026 The MITRE Corporation

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

https://www.cve.org/Legal/TermsOfUse
Copyright 2012-2026 Defiant Inc.

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Copyright 1999-2026 The MITRE Corporation

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

https://www.cve.org/Legal/TermsOfUse
Copyright 2012-2026 Defiant Inc.

Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy.

https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/
Wordfence Intelligence
Wordfence Intelligence - Defiant, Inc.
Copyright Defiant, Inc. All rights reserved except as granted below.
License grant, section 3.1 of the Wordfence Intelligence Terms and Conditions (January 26, 2026):

Subject to this Agreement, Company hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute the Service. Any copy you make for such purposes is authorized provided that you reproduce Company’s copyright designation, this license, and the license of any disclosed Company licensor in any such copy.

Full applicable Agreement: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/

Historia podatności: WordPress

Wszystkie opisane podatności tej paczki (WordPress (rdzeń)), od najnowszej. Widać, czy to jednorazowa wpadka, czy paczka, której trzeba pilnować.

Wszystkie (385) w archiwum
Wszystkich wpisów
385
Pierwsza → ostatnia
06.2003 10.2026
Bez poprawki
0
Wykorzystywana w atakach
3

Rozkład istotności

  • Krytyczna 16
  • Wysoka 95
  • Średnia 263
  • Niska 11

Ujawnienia w latach

wcześniej: 205

Istotność:
  1. WordPress Core 7.1 - 7.1.2 - Unauthenticated Stored Cross-Site Scripting via Pending Comments
    Wysoka · 7.2 4a3e3e6e-9c17-4ac5-9f83-1e01365436e9 >= 7.1.0, <= 7.1.2 7.1.3
  2. WordPress Core <= 7.1.1 - Unauthenticated Local File Inclusion via locate_template() Path Traversal
    Wysoka · 8.1 Wykorzystywana w atakach CVE-2026-87902 >= 4.7, <= 4.7.36, >= 4.8, <= 4.8.31, >= 4.9, <= 4.9.32, >= 5.0, <= 5.0.28, >= 5.1, <= 5.1.25, >= 5.2, <= 5.2.27, >= 5.3, <= 5.3.24, >= 5.4, <= 5.4.22, >= 5.5, <= 5.5.21, >= 5.6, <= 5.6.20, >= 5.7, <= 5.7.18, >= 5.8, <= 5.8.16, >= 5.9, <= 5.9.17, >= 6.0, <= 6.0.15, >= 6.1, <= 6.1.13, >= 6.2, <= 6.2.12, >= 6.3, <= 6.3.11, >= 6.4, <= 6.4.11, >= 6.5, <= 6.5.11, >= 6.6, <= 6.6.8, >= 6.7, <= 6.7.8, >= 6.8, <= 6.8.9, >= 6.9, <= 6.9.8, >= 7.0, <= 7.0.5, >= 7.1, <= 7.1.1 4.7.37, 4.8.32, 4.9.33, 5.0.29, 5.1.26, 5.2.28, 5.3.25, 5.4.23, 5.5.22, 5.6.21, 5.7.19, 5.8.17, 5.9.18, 6.0.16, 6.1.14, 6.2.13, 6.3.12, 6.4.12, 6.5.12, 6.6.9, 6.7.9, 6.8.10, 6.9.9, 7.0.6, 7.1.2
  3. WordPress Core <= 7.1 - Unauthenticated Stored Cross-Site Scripting via wpautop() Blockquote Handling
    Wysoka · 7.2 CVE-2026-93485 <= 6.6.7, >= 6.7, <= 6.7.7, >= 6.8, <= 6.8.8, >= 6.9, <= 6.9.7, >= 7.0, <= 7.0.4, = 7.1 6.6.8, 6.7.8, 6.8.9, 6.9.8, 7.0.5, 7.1.1
  4. WordPress Core <= 7.0.3 - Authenticated (Author+) Remote Code Execution via Malicious File Upload
    Wysoka · 8.8 CVE-2026-65640 >= 4.7.0, <= 4.7.34, >= 4.8.0, <= 4.8.29, >= 4.9.0, <= 4.9.30, >= 5.0.0, <= 5.0.26, >= 5.1.0, <= 5.1.23, >= 5.2.0, <= 5.2.25, >= 5.3.0, <= 5.3.22, >= 5.4.0, <= 5.4.20, >= 5.5.0, <= 5.5.19, >= 5.6.0, <= 5.6.18, >= 5.7.0, <= 5.7.16, >= 5.8.0, <= 5.8.14, >= 5.9.0, <= 5.9.15, >= 6.0.0, <= 6.0.13, >= 6.1.0, <= 6.1.11, >= 6.2.0, <= 6.2.10, >= 6.3.0, <= 6.3.9, >= 6.4.0, <= 6.4.9, >= 6.5.0, <= 6.5.9, >= 6.6.0, <= 6.6.6, >= 6.7.0, <= 6.7.6, >= 6.8.0, <= 6.8.7, >= 6.9.0, <= 6.9.6, >= 7.0.0, <= 7.0.3 4.7.35, 4.8.30, 4.9.31, 5.0.27, 5.1.24, 5.2.26, 5.3.23, 5.4.21, 5.5.20, 5.6.19, 5.7.17, 5.8.15, 5.9.16, 6.0.14, 6.1.12, 6.2.11, 6.3.10, 6.4.10, 6.5.10, 6.6.7, 6.7.7, 6.8.8, 6.9.7, 7.0.4
  5. WordPress Core 6.8 - 7.0.1 - Unauthenticated SQL Injection via author__not_in Parameter
    Wysoka · 7.5 Wykorzystywana w atakach CVE-2026-60137 >= 6.8, < 6.8.5, >= 6.9, < 6.9.5, >= 7.0, < 7.0.2 6.8.6, 6.9.5, 7.0.2
  6. WordPress Core 6.9 - 7.0.1 - Remote Code Execution via REST API Batch Request Route Confusion
    Krytyczna · 9.8 Wykorzystywana w atakach CVE-2026-63030 >= 6.9, < 6.9.5, >= 7.0, < 7.0.2 6.9.5, 7.0.2
  7. WordPress Core < 6.5.2 - Unauthenticated & Authenticated (Contributor+) Stored Cross-Site Scripting via Avatar Block
    Wysoka · 7.2 CVE-2024-4439 >= 6.0, <= 6.0.7, >= 6.1, <= 6.1.5, >= 6.2, <= 6.2.4, >= 6.3, <= 6.3.3, >= 6.4, <= 6.4.3, >= 6.5, <= 6.5.1 6.0.8, 6.1.6, 6.2.5, 6.3.4, 6.4.4, 6.5.2
  8. WordPress Core 6.4.0 - 6.4.1 - Remote Code Execution POP Chain
    Krytyczna · 9.8 CVE-2024-31211 = 6.4.0, = 6.4.1 6.4.2
  9. WordPress Core < 6.0.3 - SQL Injection via WP_Date_Query
    Krytyczna · 9.8 ff4b47d8-28c1-4706-91d9-0285f419147e <= 3.6.1, >= 3.7, <= 3.7.39, >= 3.8, <= 3.8.39, >= 3.9, <= 3.9.37, >= 4.0, <= 4.0.36, >= 4.1, <= 4.1.36, >= 4.2, <= 4.2.33, >= 4.3, <= 4.3.29, >= 4.4, <= 4.4.28, >= 4.5, <= 4.5.27, >= 4.6, <= 4.6.24, >= 4.7, <= 4.7.24, >= 4.8, <= 4.8.20, >= 4.9, <= 4.9.21, >= 5.0, <= 5.0.17, >= 5.1, <= 5.1.14, >= 5.2, <= 5.2.16, >= 5.3, <= 5.3.13, >= 5.4, <= 5.4.11, >= 5.5, <= 5.5.10, >= 5.6, <= 5.6.9, >= 5.7, <= 5.7.7, >= 5.8, <= 5.8.5, >= 5.9, <= 5.9.4, >= 6.0, <= 6.0.2 3.7.40, 3.8.40, 3.9.38, 4.0.37, 4.1.37, 4.2.34, 4.3.30, 4.4.29, 4.5.28, 4.6.25, 4.7.25, 4.8.21, 4.9.22, 5.0.18, 5.1.15, 5.2.17, 5.3.14, 5.4.12, 5.5.11, 5.6.10, 5.7.8, 5.8.6, 5.9.5, 6.0.3
  10. WordPress Core < 6.0.3 - Cross-Site Request Forgery via wp-trackback.php
    Wysoka · 8.8 ddd06190-d0c1-445d-8c6f-4c7df3248db4 <= 3.6.1, >= 3.7, <= 3.7.39, >= 3.8, <= 3.8.39, >= 3.9, <= 3.9.37, >= 4.0, <= 4.0.36, >= 4.1, <= 4.1.36, >= 4.2, <= 4.2.33, >= 4.3, <= 4.3.29, >= 4.4, <= 4.4.28, >= 4.5, <= 4.5.27, >= 4.6, <= 4.6.24, >= 4.7, <= 4.7.24, >= 4.8, <= 4.8.20, >= 4.9, <= 4.9.21, >= 5.0, <= 5.0.17, >= 5.1, <= 5.1.14, >= 5.2, <= 5.2.16, >= 5.3, <= 5.3.13, >= 5.4, <= 5.4.11, >= 5.5, <= 5.5.10, >= 5.6, <= 5.6.9, >= 5.7, <= 5.7.7, >= 5.8, <= 5.8.5, >= 5.9, <= 5.9.4, >= 6.0, <= 6.0.2 3.7.40, 3.8.40, 3.9.38, 4.0.37, 4.1.37, 4.2.34, 4.3.30, 4.4.29, 4.5.28, 4.6.25, 4.7.25, 4.8.21, 4.9.22, 5.0.18, 5.1.15, 5.2.17, 5.3.14, 5.4.12, 5.5.11, 5.6.10, 5.7.8, 5.8.6, 5.9.5, 6.0.3
  11. WordPress Core < 6.0.3 - Reflected Cross-Site Scripting via SQL Injection
    Wysoka · 8.8 CVE-2022-43497 <= 3.6.1, >= 3.7, <= 3.7.39, >= 3.8, <= 3.8.39, >= 3.9, <= 3.9.37, >= 4.0, <= 4.0.36, >= 4.1, <= 4.1.36, >= 4.2, <= 4.2.33, >= 4.3, <= 4.3.29, >= 4.4, <= 4.4.28, >= 4.5, <= 4.5.27, >= 4.6, <= 4.6.24, >= 4.7, <= 4.7.24, >= 4.8, <= 4.8.20, >= 4.9, <= 4.9.21, >= 5.0, <= 5.0.17, >= 5.1, <= 5.1.14, >= 5.2, <= 5.2.16, >= 5.3, <= 5.3.13, >= 5.4, <= 5.4.11, >= 5.5, <= 5.5.10, >= 5.6, <= 5.6.9, >= 5.7, <= 5.7.7, >= 5.8, <= 5.8.5, >= 5.9, <= 5.9.4, >= 6.0, <= 6.0.2 3.7.40, 3.8.40, 3.9.38, 4.0.37, 4.1.37, 4.2.34, 4.3.30, 4.4.29, 4.5.28, 4.6.25, 4.7.25, 4.8.21, 4.9.22, 5.0.18, 5.1.15, 5.2.17, 5.3.14, 5.4.12, 5.5.11, 5.6.10, 5.7.8, 5.8.6, 5.9.5, 6.0.3
  12. WordPress Core < 6.0.2 - Authenticated SQL Injection
    Wysoka · 8.0 0248f829-84de-40b9-bb63-354fbf06472d <= 3.6.1, >= 3.7, <= 3.7.38, >= 3.8, <= 3.8.38, >= 3.9, <= 3.9.36, >= 4.0, <= 4.0.35, >= 4.1, <= 4.1.35, >= 4.2, <= 4.2.32, >= 4.3, <= 4.3.28, >= 4.4, <= 4.4.27, >= 4.5, <= 4.5.26, >= 4.6, <= 4.6.23, >= 4.7, <= 4.7.23, >= 4.8, <= 4.8.19, >= 4.9, <= 4.9.20, >= 5.0, <= 5.0.16, >= 5.1, <= 5.1.13, >= 5.2, <= 5.2.15, >= 5.3, <= 5.3.12, >= 5.4, <= 5.4.10, >= 5.5, <= 5.5.9, >= 5.6, <= 5.6.8, >= 5.7, <= 5.7.6, >= 5.8, <= 5.8.4, >= 5.9, <= 5.9.3, >= 6.0, <= 6.0.1 3.7.39, 3.8.39, 3.9.37, 4.0.36, 4.1.36, 4.2.33, 4.3.29, 4.4.28, 4.5.27, 4.6.24, 4.7.24, 4.8.20, 4.9.21, 5.0.17, 5.1.14, 5.2.16, 5.3.13, 5.4.11, 5.5.10, 5.6.9, 5.7.7, 5.8.5, 5.9.4, 6.0.2
  13. WordPress Core < 5.9.1 - jQuery Prototype Pollution
    Wysoka · 8.8 CVE-2021-20083 < 3.7, >= 3.7, <= 3.7.37, >= 3.8, <= 3.8.37, >= 3.9, <= 3.9.35, >= 4.0, <= 4.0.34, >= 4.1, <= 4.1.34, >= 4.2, <= 4.2.31, >= 4.3, <= 4.3.27, >= 4.4, <= 4.4.26, >= 4.5, <= 4.5.25, >= 4.6, <= 4.6.22, >= 4.7, <= 4.7.22, >= 4.8, <= 4.8.18, >= 4.9, <= 4.9.19, >= 5.0, <= 5.0.15, >= 5.1, <= 5.1.12, >= 5.2, <= 5.2.14, >= 5.3, <= 5.3.11, >= 5.4, <= 5.4.9, >= 5.5, <= 5.5.8, >= 5.6, <= 5.6.7, >= 5.7, <= 5.7.5, >= 5.8, <= 5.8.3, >= 5.9, <= 5.9.1 3.7.38, 3.8.38, 3.9.36, 4.0.35, 4.1.35, 4.2.32, 4.3.28, 4.4.27, 4.5.26, 4.6.23, 4.7.23, 4.8.19, 4.9.20, 5.0.16, 5.1.13, 5.2.15, 5.3.12, 5.4.10, 5.5.9, 5.6.8, 5.7.6, 5.8.4, 5.9.2
  14. WordPress Core < 5.8.3 - Authenticated (Author+) Stored Cross Site Scripting
    Wysoka · 8.0 CVE-2022-21662 >= 3.7, < 3.7.37, >= 3.8, < 3.8.37, >= 3.9, < 3.9.35, >= 4.0, < 4.0.34, >= 4.1, < 4.1.34, >= 4.2, < 4.2.31, >= 4.3, < 4.3.27, >= 4.4, < 4.4.26, >= 4.5, < 4.5.25, >= 4.6, < 4.6.22, >= 4.7, < 4.7.22, >= 4.8, < 4.8.18, >= 4.9, < 4.9.19, >= 5.0, < 5.0.15, >= 5.1, < 5.1.12, >= 5.2, < 5.2.14, >= 5.3, < 5.3.11, >= 5.4, < 5.4.9, >= 5.5, < 5.5.8, >= 5.6, < 5.6.7, >= 5.7, < 5.7.5, >= 5.8, < 5.8.3 3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3
  15. WordPress Core < 5.8.3 - SQL Injection via WP_Meta_Query
    Wysoka · 7.4 CVE-2022-21664 >= 4.1, < 4.1.34, >= 4.2, < 4.2.31, >= 4.3, < 4.3.27, >= 4.4, < 4.4.26, >= 4.5, < 4.5.25, >= 4.6, < 4.6.22, >= 4.7, < 4.7.22, >= 4.8, < 4.8.18, >= 4.9, < 4.9.19, >= 5.0, < 5.0.15, >= 5.1, < 5.1.12, >= 5.2, < 5.2.14, >= 5.3, < 5.3.11, >= 5.4, < 5.4.9, >= 5.5, < 5.5.8, >= 5.6, < 5.6.7, >= 5.7, < 5.7.5, >= 5.8, < 5.8.3 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3
  16. WordPress Core 5.4 - 5.8 - Authenticated Stored Cross-Site Scripting
    Wysoka · 7.6 CVE-2021-39201 >= 5.4, < 5.4.7, >= 5.5, < 5.5.6, >= 5.6, < 5.6.5, >= 5.7, < 5.7.3, >= 5.8, < 5.8.1 5.4.7, 5.5.6, 5.6.5, 5.7.3, 5.8.1
  17. WordPress Core < 5.7.1 - XXE Injection
    Wysoka · 7.1 CVE-2021-29447 >= 4.7, < 4.7.20, >= 4.8, < 4.8.16, >= 4.9, < 4.9.17, >= 5.0, < 5.0.12, >= 5.1, < 5.1.9, >= 5.2, < 5.2.10, >= 5.3, < 5.3.7, >= 5.4, < 5.4.5, >= 5.5, < 5.5.4, >= 5.6, < 5.6.3, >= 5.7, < 5.7.1 4.7.20, 4.8.16, 4.9.17, 5.0.12, 5.1.9, 5.2.10, 5.3.7, 5.4.5, 5.5.4, 5.6.3, 5.7.1
  18. WordPress Core < 5.8.3 - SQL Injection via WP_Query
    Wysoka · 8.0 CVE-2022-21661 >= 3.7, < 3.7.37, >= 3.8, < 3.8.37, >= 3.9, < 3.9.35, >= 4.0, < 4.0.34, >= 4.1, < 4.1.34, >= 4.2, < 4.2.31, >= 4.3, < 4.3.27, >= 4.4, < 4.4.26, >= 4.5, < 4.5.25, >= 4.6, < 4.6.22, >= 4.7, < 4.7.22, >= 4.8, < 4.8.18, >= 4.9, < 4.9.19, >= 5.0, < 5.0.15, >= 5.1, < 5.1.12, >= 5.2, < 5.2.14, >= 5.3, < 5.3.11, >= 5.4, < 5.4.9, >= 5.5, < 5.5.8, >= 5.6, < 5.6.7, >= 5.7, < 5.7.5, >= 5.8, < 5.8.3 3.7.37, 3.8.37, 3.9.35, 4.0.34, 4.1.34, 4.2.31, 4.3.27, 4.4.26, 4.5.25, 4.6.22, 4.7.22, 4.8.18, 4.9.19, 5.0.15, 5.1.12, 5.2.14, 5.3.11, 5.4.9, 5.5.8, 5.6.7, 5.7.5, 5.8.3
  19. WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
    Wysoka · 8.8 CVE-2020-28035 < 3.7, >= 3.7, <= 3.7.34, >= 3.8, <= 3.8.34, >= 3.9, <= 3.9.32, >= 4.0, <= 4.0.31, >= 4.1, <= 4.1.31, >= 4.2, <= 4.2.28, >= 4.3, <= 4.3.24, >= 4.4, <= 4.4.23, >= 4.5, <= 4.5.22, >= 4.6, <= 4.6.19, >= 4.7, <= 4.7.18, >= 4.8, <= 4.8.14, >= 4.9, <= 4.9.15, >= 5.0, <= 5.0.10, >= 5.1, <= 5.1.6, >= 5.2, <= 5.2.7, >= 5.3, <= 5.3.4, >= 5.4, <= 5.4.2, >= 5.5, <= 5.5.1 3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.7, 5.2.8, 5.3.5, 5.4.3, 5.5.2
  20. WordPress Core < 5.5.2 - Deserialization Gadget
    Wysoka · 8.8 CVE-2020-28032 < 3.7, >= 3.7, <= 3.7.34, >= 3.8, <= 3.8.34, >= 3.9, <= 3.9.32, >= 4.0, <= 4.0.31, >= 4.1, <= 4.1.31, >= 4.2, <= 4.2.28, >= 4.3, <= 4.3.24, >= 4.4, <= 4.4.23, >= 4.5, <= 4.5.22, >= 4.6, <= 4.6.19, >= 4.7, <= 4.7.18, >= 4.8, <= 4.8.14, >= 4.9, <= 4.9.15, >= 5.0, <= 5.0.10, >= 5.1, <= 5.1.6, >= 5.2, <= 5.2.7, >= 5.3, <= 5.3.4, >= 5.4, <= 5.4.2, >= 5.5, <= 5.5.1 3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.7, 5.2.8, 5.3.5, 5.4.3, 5.5.2
  21. WordPress Core < 5.5.2 - Privilege Escalation via XML-RPC
    Wysoka · 8.8 CVE-2020-28036 < 3.7, >= 3.7, <= 3.7.34, >= 3.8, <= 3.8.34, >= 3.9, <= 3.9.32, >= 4.0, <= 4.0.31, >= 4.1, <= 4.1.31, >= 4.2, <= 4.2.28, >= 4.3, <= 4.3.24, >= 4.4, <= 4.4.23, >= 4.5, <= 4.5.22, >= 4.6, <= 4.6.19, >= 4.7, <= 4.7.18, >= 4.8, <= 4.8.14, >= 4.9, <= 4.9.15, >= 5.0, <= 5.0.10, >= 5.1, <= 5.1.6, >= 5.2, <= 5.2.7, >= 5.3, <= 5.3.4, >= 5.4, <= 5.4.2, >= 5.5, <= 5.5.1 3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.7, 5.2.8, 5.3.5, 5.4.3, 5.5.2
  22. WordPress Core < 5.5.3 - PHP Object Injection Gadget
    Krytyczna · 9.8 CVE-2021-29476 < 3.7, >= 3.7, < 3.7.35, >= 3.8, < 3.8.35, >= 3.9, < 3.9.33, >= 4.0, < 4.0.32, >= 4.1, < 4.1.32, >= 4.2, < 4.2.29, >= 4.3, < 4.3.25, >= 4.4, < 4.4.24, >= 4.5, < 4.5.23, >= 4.6, < 4.6.20, >= 4.7, < 4.7.19, >= 4.8, < 4.8.15, >= 4.9, < 4.9.16, >= 5.0, < 5.0.11, >= 5.1, < 5.1.8, >= 5.2, < 5.2.9, >= 5.3, < 5.3.6, >= 5.4, < 5.4.4, >= 5.5, < 5.5.3 3.7.35, 3.8.35, 3.9.33, 4.0.32, 4.1.32, 4.2.29, 4.3.25, 4.4.24, 4.5.23, 4.6.20, 4.7.19, 4.8.15, 4.9.16, 5.0.11, 5.1.8, 5.2.9, 5.3.6, 5.4.4, 5.5.3
  23. WordPress Core < 5.2.4 - Cache Poisoning
    Wysoka · 7.3 CVE-2019-17673 < 3.7, >= 3.7, <= 3.7.30, >= 3.8, <= 3.8.30, >= 3.9, <= 3.9.28, >= 4.0, <= 4.0.27, >= 4.1, <= 4.1.27, >= 4.2, <= 4.2.24, >= 4.3, <= 4.3.20, >= 4.4, <= 4.4.19, >= 4.5, <= 4.5.18, >= 4.6, <= 4.6.15, >= 4.7, <= 4.7.14, >= 4.8, <= 4.8.10, >= 4.9, <= 4.9.11, >= 5.0, <= 5.0.6, >= 5.1, <= 5.1.2, >= 5.2, <= 5.2.3 3.7.31, 3.8.31, 3.9.29, 4.0.28, 4.1.28, 4.2.25, 4.3.21, 4.4.20, 4.5.19, 4.6.16, 4.7.15, 4.8.11, 4.9.12, 5.0.7, 5.1.3, 5.2.4
  24. WordPress Core < 5.2.3 - Stored Cross-Site Scripting via Comments
    Wysoka · 7.2 CVE-2019-16218 < 3.7, >= 3.7, <= 3.7.29, >= 3.8, <= 3.8.29, >= 3.9, <= 3.9.27, >= 4.0, <= 4.0.26, >= 4.1, <= 4.1.26, >= 4.2, <= 4.2.23, >= 4.3, <= 4.3.19, >= 4.4, <= 4.4.18, >= 4.5, <= 4.5.17, >= 4.6, <= 4.6.13, >= 4.7, <= 4.7.12, >= 4.8, <= 4.8.9, >= 4.9, <= 4.9.10, >= 5.0, <= 5.0.5, >= 5.1, <= 5.1.1, >= 5.2, <= 5.2.2 3.7.30, 3.8.30, 3.9.28, 4.0.27, 4.1.27, 4.2.24, 4.3.20, 4.4.19, 4.5.18, 4.6.15, 4.7.13, 4.8.10, 4.9.11, 5.0.6, 5.1.2, 5.2.3
  25. WordPress Core < 5.1.1 - Cross-Site Request Forgery to Cross-Site Scripting via Comments
    Krytyczna · 9.6 CVE-2019-9787 < 3.7, >= 3.7, <= 3.7.28, >= 3.8, <= 3.8.28, >= 3.9, <= 3.9.26, >= 4.0, <= 4.0.25, >= 4.1, <= 4.1.25, >= 4.2, <= 4.2.22, >= 4.3, <= 4.3.18, >= 4.4, <= 4.4.17, >= 4.5, <= 4.5.16, >= 4.6, <= 4.6.13, >= 4.7, <= 4.7.12, >= 4.8, <= 4.8.8, >= 4.9, <= 4.9.9, >= 5.0, <= 5.0.3, = 5.1 3.7.29, 3.8.29, 3.9.27, 4.0.26, 4.1.26, 4.2.23, 4.3.19, 4.4.18, 4.5.17, 4.6.14, 4.7.13, 4.8.9, 4.9.10, 5.0.4, 5.1.1
  26. WordPress Core < 5.0.1 - Remote Code Execution
    Wysoka · 8.8 CVE-2019-8942 < 3.7, >= 3.7, <= 3.7.27, >= 3.8, <= 3.8.27, >= 3.9, <= 3.9.25, >= 4.0, <= 4.0.24, >= 4.1, <= 4.1.24, >= 4.2, <= 4.2.21, >= 4.3, <= 4.3.17, >= 4.4, <= 4.4.16, >= 4.5, <= 4.5.15, >= 4.6, <= 4.6.12, >= 4.7, <= 4.7.11, >= 4.8, <= 4.8.7, >= 4.9, <= 4.9.8, = 5.0 3.7.28, 3.8.28, 3.9.26, 4.0.25, 4.1.25, 4.2.22, 4.3.18, 4.4.17, 4.5.16, 4.6.13, 4.7.12, 4.8.8, 4.9.9, 5.0.1
  27. WordPress Core < 5.0.1 - Sensitive Information Disclosure
    Wysoka · 7.5 CVE-2018-20151 < 3.7, >= 3.7, <= 3.7.27, >= 3.8, <= 3.8.27, >= 3.9, <= 3.9.25, >= 4.0, <= 4.0.24, >= 4.1, <= 4.1.24, >= 4.2, <= 4.2.21, >= 4.3, <= 4.3.17, >= 4.4, <= 4.4.16, >= 4.5, <= 4.5.15, >= 4.6, <= 4.6.12, >= 4.7, <= 4.7.11, >= 4.8, <= 4.8.7, >= 4.9, <= 4.9.8, = 5.0 3.7.28, 3.8.28, 3.9.26, 4.0.25, 4.1.25, 4.2.22, 4.3.18, 4.4.17, 4.5.16, 4.6.13, 4.7.12, 4.8.8, 4.9.9, 5.0.1
  28. WordPress Core < 5.0.1 - Arbitrary File Deletion
    Wysoka · 7.7 CVE-2018-20147 < 3.7, >= 3.7, <= 3.7.27, >= 3.8, <= 3.8.27, >= 3.9, <= 3.9.25, >= 4.0, <= 4.0.24, >= 4.1, <= 4.1.24, >= 4.2, <= 4.2.21, >= 4.3, <= 4.3.17, >= 4.4, <= 4.4.16, >= 4.5, <= 4.5.15, >= 4.6, <= 4.6.12, >= 4.7, <= 4.7.11, >= 4.8, <= 4.8.7, >= 4.9, <= 4.9.8, = 5.0 3.7.28, 3.8.28, 3.9.26, 4.0.25, 4.1.25, 4.2.22, 4.3.18, 4.4.17, 4.5.16, 4.6.13, 4.7.12, 4.8.8, 4.9.9, 5.0.1
  29. WordPress Core < 5.0.1 - PHP Object Injection
    Wysoka · 8.8 CVE-2018-20148 < 3.7, >= 3.7, <= 3.7.27, >= 3.8, <= 3.8.27, >= 3.9, <= 3.9.25, >= 4.0, <= 4.0.24, >= 4.1, <= 4.1.24, >= 4.2, <= 4.2.21, >= 4.3, <= 4.3.17, >= 4.4, <= 4.4.16, >= 4.5, <= 4.5.15, >= 4.6, <= 4.6.12, >= 4.7, <= 4.7.11, >= 4.8, <= 4.8.7, >= 4.9, <= 4.9.8, = 5.0 3.7.28, 3.8.28, 3.9.26, 4.0.25, 4.1.25, 4.2.22, 4.3.18, 4.4.17, 4.5.16, 4.6.13, 4.7.12, 4.8.8, 4.9.9, 5.0.1
  30. WordPress Core < 5.0.1 - PHAR Unserialization
    Wysoka · 7.5 CVE-2018-1000773 < 3.7, >= 3.7, <= 3.7.27, >= 3.8, <= 3.8.27, >= 3.9, <= 3.9.25, >= 4.0, <= 4.0.24, >= 4.1, <= 4.1.24, >= 4.2, <= 4.2.21, >= 4.3, <= 4.3.17, >= 4.4, <= 4.4.16, >= 4.5, <= 4.5.15, >= 4.6, <= 4.6.12, >= 4.7, <= 4.7.11, >= 4.8, <= 4.8.7, >= 4.9, <= 4.9.8, = 5.0 3.7.28, 3.8.28, 3.9.26, 4.0.25, 4.1.25, 4.2.22, 4.3.18, 4.4.17, 4.5.16, 4.6.13, 4.7.12, 4.8.8, 4.9.9, 5.0.1
  31. WordPress Core < 4.9 - Insecure Deserialization
    Wysoka · 8.8 CVE-2017-1000600 < 4.9 4.9
  32. WordPress Core < 4.9.7 - Authenticated Arbitrary File Deletion
    Wysoka · 8.8 CVE-2018-12895 < 3.7, >= 3.7, <= 3.7.26, >= 3.8, <= 3.8.26, >= 3.9, <= 3.9.24, >= 4.0, <= 4.0.23, >= 4.1, <= 4.1.23, >= 4.2, <= 4.2.20, >= 4.3, <= 4.3.16, >= 4.4, <= 4.4.15, >= 4.5, <= 4.5.14, >= 4.6, <= 4.6.11, >= 4.7, <= 4.7.10, >= 4.8, <= 4.8.6, >= 4.9, <= 4.9.6 3.7.27, 3.8.27, 3.9.25, 4.0.24, 4.1.24, 4.2.21, 4.3.17, 4.4.16, 4.5.15, 4.6.12, 4.7.11, 4.8.7, 4.9.7
  33. WordPress Core < 5.0 - Denial of Service
    Wysoka · 7.5 CVE-2018-6389 < 5.0 5.0
  34. WordPress Core < 4.8.3 - SQL Injection due to Double Prepare approach
    Krytyczna · 9.8 CVE-2017-16510 < 3.7, >= 3.7, <= 3.7.22, >= 3.8, <= 3.8.22, >= 3.9, <= 3.9.20, >= 4.0, <= 4.0.19, >= 4.1, <= 4.1.19, >= 4.2, <= 4.2.16, >= 4.3, <= 4.3.12, >= 4.4, <= 4.4.11, >= 4.5, <= 4.5.10, >= 4.6, <= 4.6.7, >= 4.7, <= 4.7.6, >= 4.8, <= 4.8.2 3.7.23, 3.8.23, 3.9.21, 4.0.20, 4.1.20, 4.2.17, 4.3.13, 4.4.12, 4.5.11, 4.6.8, 4.7.7, 4.8.3
  35. WordPress Core < 4.8.2 - SQL Injection via Mishandled Placeholders
    Krytyczna · 9.8 CVE-2017-14723 < 3.7, >= 3.7, <= 3.7.21, >= 3.8, <= 3.8.21, >= 3.9, <= 3.9.19, >= 4.0, <= 4.0.18, >= 4.1, <= 4.1.18, >= 4.2, <= 4.2.15, >= 4.3, <= 4.3.11, >= 4.4, <= 4.4.10, >= 4.5, <= 4.5.9, >= 4.6, <= 4.6.6, >= 4.7, <= 4.7.5, >= 4.8, <= 4.8.1 3.7.22, 3.8.22, 3.9.20, 4.0.19, 4.1.19, 4.2.16, 4.3.12, 4.4.11, 4.5.10, 4.6.7, 4.7.6, 4.8.2
  36. WordPress Core < 4.7.5 - Server-Side Request Forgery
    Wysoka · 7.7 CVE-2017-9066 < 3.7, >= 3.7, <= 3.7.20, >= 3.8, <= 3.8.20, >= 3.9, <= 3.9.18, >= 4.0, <= 4.0.17, >= 4.1, <= 4.1.17, >= 4.2, <= 4.2.14, >= 4.3, <= 4.3.10, >= 4.4, <= 4.4.9, >= 4.5, <= 4.5.8, >= 4.6, <= 4.6.5, >= 4.7, <= 4.7.4 3.7.21, 3.8.21, 3.9.19, 4.0.18, 4.1.18, 4.2.15, 4.3.11, 4.4.10, 4.5.9, 4.6.6, 4.7.5
  37. WordPress Core < 4.7.5 - Cross-Site Request Forgery Filesystem Credential Update
    Wysoka · 8.8 CVE-2017-9064 < 3.7, >= 3.7, <= 3.7.20, >= 3.8, <= 3.8.20, >= 3.9, <= 3.9.18, >= 4.0, <= 4.0.17, >= 4.1, <= 4.1.17, >= 4.2, <= 4.2.14, >= 4.3, <= 4.3.10, >= 4.4, <= 4.4.9, >= 4.5, <= 4.5.8, >= 4.6, <= 4.6.5, >= 4.7, <= 4.7.4 3.7.21, 3.8.21, 3.9.19, 4.0.18, 4.1.18, 4.2.15, 4.3.11, 4.4.10, 4.5.9, 4.6.6, 4.7.5
  38. WordPress Core < 4.7.3 - Cross-Site Request Forgery via Press This
    Wysoka · 8.8 CVE-2017-6819 < 3.7, >= 3.7, <= 3.7.18, >= 3.8, <= 3.8.18, >= 3.9, <= 3.9.16, >= 4.0, <= 4.0.15, >= 4.1, <= 4.1.15, >= 4.2, <= 4.2.12, >= 4.3, <= 4.3.8, >= 4.4, <= 4.4.7, >= 4.5, <= 4.5.6, >= 4.6, <= 4.6.3, >= 4.7, <= 4.7.2 3.7.19, 3.8.19, 3.9.17, 4.0.16, 4.1.16, 4.2.13, 4.3.9, 4.4.8, 4.5.7, 4.6.4, 4.7.3
  39. WordPress Core < 4.7.2 - Authenticated SQL Injection
    Wysoka · 8.8 CVE-2017-5611 < 3.7, >= 3.7, <= 3.7.17, >= 3.8, <= 3.8.17, >= 3.9, <= 3.9.15, >= 4.0, <= 4.0.14, >= 4.1, <= 4.1.14, >= 4.2, <= 4.2.11, >= 4.3, <= 4.3.7, >= 4.4, <= 4.4.6, >= 4.5, <= 4.5.5, >= 4.6, <= 4.6.2, >= 4.7, <= 4.7.1 3.7.18, 3.8.18, 3.9.16, 4.0.15, 4.1.15, 4.2.12, 4.3.8, 4.4.7, 4.5.6, 4.6.3, 4.7.2
  40. WordPress Core < 4.7.2 - Arbitrary Page Modification
    Wysoka · 7.3 CVE-2017-1001000 < 3.7, >= 3.7, <= 3.7.17, >= 3.8, <= 3.8.17, >= 3.9, <= 3.9.15, >= 4.0, <= 4.0.14, >= 4.1, <= 4.1.14, >= 4.2, <= 4.2.11, >= 4.3, <= 4.3.7, >= 4.4, <= 4.4.6, >= 4.5, <= 4.5.5, >= 4.6, <= 4.6.2, >= 4.7, <= 4.7.1 3.7.18, 3.8.18, 3.9.16, 4.0.15, 4.1.15, 4.2.12, 4.3.8, 4.4.7, 4.5.6, 4.6.3, 4.7.2
  41. WordPress Core < 4.7.1 - Authorization Bypass
    Wysoka · 8.3 CVE-2017-5491 < 3.7, >= 3.7, <= 3.7.16, >= 3.8, <= 3.8.16, >= 3.9, <= 3.9.14, >= 4.0, <= 4.0.13, >= 4.1, <= 4.1.13, >= 4.2, <= 4.2.10, >= 4.3, <= 4.3.6, >= 4.4, <= 4.4.5, >= 4.5, <= 4.5.4, >= 4.6, <= 4.6.1, >= 4.7, <= 4.7.0 3.7.17, 3.8.17, 3.9.15, 4.0.14, 4.1.14, 4.2.11, 4.3.7, 4.4.6, 4.5.5, 4.6.2, 4.7.1
  42. WordPress Core < 4.7.1 - Cross-Site Request Forgery via Uploading Flash File
    Wysoka · 8.8 CVE-2017-5489 < 3.7, >= 3.7, <= 3.7.16, >= 3.8, <= 3.8.16, >= 3.9, <= 3.9.14, >= 4.0, <= 4.0.13, >= 4.1, <= 4.1.13, >= 4.2, <= 4.2.10, >= 4.3, <= 4.3.6, >= 4.4, <= 4.4.5, >= 4.5, <= 4.5.4, >= 4.6, <= 4.6.1, >= 4.7, <= 4.7.0 3.7.17, 3.8.17, 3.9.15, 4.0.14, 4.1.14, 4.2.11, 4.3.7, 4.4.6, 4.5.5, 4.6.2, 4.7.1
  43. WordPress Core < 4.7.1 - Cross-Site Request Forgery via Widget Editing
    Wysoka · 8.8 CVE-2017-5492 < 3.7, >= 3.7, <= 3.7.16, >= 3.8, <= 3.8.16, >= 3.9, <= 3.9.14, >= 4.0, <= 4.0.13, >= 4.1, <= 4.1.13, >= 4.2, <= 4.2.10, >= 4.3, <= 4.3.6, >= 4.4, <= 4.4.5, >= 4.5, <= 4.5.4, >= 4.6, <= 4.6.1, = 4.7 3.7.17, 3.8.17, 3.9.15, 4.0.14, 4.1.14, 4.2.11, 4.3.7, 4.4.6, 4.5.5, 4.6.2, 4.7.1
  44. WordPress Core < 4.6 - Cross-Site Request Forgery
    Wysoka · 8.8 CVE-2016-6897 < 4.6 4.6
  45. WordPress Core < 4.5.3 - Bypass sanitize_file_name Protection
    Wysoka · 7.3 CVE-2016-5839 < 3.7, >= 3.7, <= 3.7.14, >= 3.8, <= 3.8.14, >= 3.9, <= 3.9.12, >= 4.0, <= 4.0.11, >= 4.1, <= 4.1.11, >= 4.2, <= 4.2.8, >= 4.3, <= 4.3.4, >= 4.4, <= 4.4.3, >= 4.5, <= 4.5.2 3.7.15, 3.8.15, 3.9.13, 4.0.12, 4.1.12, 4.2.9, 4.3.5, 4.4.4, 4.5.3
  46. WordPress Core < 4.5 - Cross-Site Request Forgery via wp_ajax_wp_compression_test
    Wysoka · 8.8 CVE-2016-6635 < 4.5 4.5
  47. WordPress Core < 4.2.4 - SQL Injection
    Wysoka · 8.8 CVE-2015-2213 < 3.7, >= 3.7, <= 3.7.9, >= 3.8, <= 3.8.9, >= 3.9, <= 3.9.7, >= 4.0, <= 4.0.6, >= 4.1, <= 4.1.6, >= 4.2, <= 4.2.3 3.7.10, 3.8.10, 3.9.8, 4.0.7, 4.1.7, 4.2.4
  48. WordPress Core < 4.2.4 - Cross-Site Request Forgery to Post Lockage
    Krytyczna · 9.6 CVE-2015-5731 < 3.7, >= 3.7, <= 3.7.9, >= 3.8, <= 3.8.9, >= 3.9, <= 3.9.7, >= 4.0, <= 4.0.6, >= 4.1, <= 4.1.6, >= 4.2, <= 4.2.3 3.7.10, 3.8.10, 3.9.8, 4.0.7, 4.1.7, 4.2.4
  49. WordPress Core < 4.2.2 - Cross-Site Scripting via Comments
    Wysoka · 7.2 CVE-2015-8834 < 3.7, >= 3.7, <= 3.7.7, >= 3.8, <= 3.8.7, >= 3.9, <= 3.9.5, >= 4.0, <= 4.0.4, >= 4.1, <= 4.1.4, >= 4.2, <= 4.2.1 3.7.8, 3.8.8, 3.9.6, 4.0.5, 4.1.5, 4.2.2
  50. WordPress Core < 4.2.1 - Cross-Site Scripting via Comments
    Wysoka · 7.2 CVE-2015-3440 >= 4.0, <= 4.0.3, >= 4.1, <= 4.1.3, = 4.2 4.0.4, 4.1.4, 4.2.1
  51. WordPress Core < 4.1.2 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2015-3438 < 3.7, >= 3.7, <= 3.7.5, >= 3.8, <= 3.8.5, >= 3.9, <= 3.9.3, >= 4.0, <= 4.0.1, >= 4.1, <= 4.1.1 3.7.6, 3.8.6, 3.9.4, 4.0.2, 4.1.2
  52. WordPress Core < 4.4 - Brute Force Password Recovery Tokens
    Wysoka · 7.5 CVE-2014-6412 < 4.4 4.4
  53. WordPress Core < 4.0.1 - Cross-Site Scripting via media-playlists
    Wysoka · 7.2 CVE-2014-9032 < 3.7, >= 3.7, <= 3.7.4, >= 3.8, <= 3.8.4, >= 3.9, <= 3.9.2, = 4.0 3.7.5, 3.8.5, 3.9.3, 4.0.1
  54. WordPress Core < 4.0.1 Cross-Site Request Forgery to Password Reset
    Wysoka · 8.8 CVE-2014-9039 < 3.7, >= 3.7, <= 3.7.4, >= 3.8, <= 3.8.4, >= 3.9, <= 3.9.2, = 4.0 3.7.5, 3.8.5, 3.9.3, 4.0.1
  55. WordPress Core < 4.0.1 - Server-Side Request Forgery
    Wysoka · 7.7 CVE-2014-9038 < 3.7, >= 3.7, <= 3.7.4, >= 3.8, <= 3.8.4, >= 3.9, <= 3.9.2, = 4.0 3.7.5, 3.8.5, 3.9.3, 4.0.1
  56. Wordpress Core < 4.0.1 - Hash Collision
    Wysoka · 8.1 CVE-2014-9037 < 3.7, >= 3.7, <= 3.7.4, >= 3.8, <= 3.8.4, >= 3.9, <= 3.9.2, = 4.0 3.7.5, 3.8.5, 3.9.3, 4.0.1
  57. WordPress Core < 4.0.1 - Cross-Site Request Forgery to Authentication Takeover
    Wysoka · 8.8 CVE-2014-9033 < 3.7, >= 3.7, <= 3.7.3, >= 3.8, <= 3.8.3, >= 3.9, <= 3.9.1 3.7.4, 3.8.4, 3.9.2
  58. WordPress Core < 3.9.2 - Deserialization via Widgets
    Wysoka · 7.2 CVE-2014-5203 < 3.7, >= 3.7, <= 3.7.3, >= 3.8, <= 3.8.3, >= 3.9, <= 3.9.1 3.7.4, 3.8.4, 3.9.2
  59. WordPress Core < 3.9.2 - Cross-Site Request Forgery Protection Bypass
    Wysoka · 8.8 CVE-2014-5204 < 3.7, >= 3.7, <= 3.7.3, >= 3.8, <= 3.8.3, >= 3.9, <= 3.9.1 3.7.4, 3.8.4, 3.9.2
  60. WordPress Core < 3.8.2 - SQL Injection
    Wysoka · 7.2 09935fd1-5a95-411a-a820-60888be7b059 = 3.8.1 3.8.2
  61. WordPress Core < 2.1 - Cross-Site Request Forgery to Denial of Service
    Wysoka · 8.8 CVE-2013-7233 <= 2.0.11 2.1
  62. WordPress Core < 3.6.1 - Deserialization
    Wysoka · 8.8 CVE-2013-4338 <= 3.6 3.6.1
  63. WordPress Core < 3.4.1 - Cross-Site Request Forgery
    Wysoka · 8.8 CVE-2012-3384 <= 3.4 3.4.1
  64. WordPress Core <= 3.5.1 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2012-2399 <= 3.5.1 3.5.2
  65. WordPress Core < 3.3.2 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2012-2400 <= 3.3.1 3.3.2
  66. SWFUpload <= 2.2.0.1 - Cross-Site Scripting ten wpis
    Średnia · 6.1 CVE-2012-3414 < 3.3.2 3.3.2
  67. WordPress Core < 3.1.3 - Clickjacking
    Wysoka · 7.1 CVE-2011-3127 <= 3.1.2 3.1.3
  68. WordPress Core <= 3.1.2 - SQL Injection
    Wysoka · 8.8 CVE-2011-3130 <= 3.1.2 3.1.3
  69. WordPress Core <= 3.1.2 - Arbitrary File Upload
    Wysoka · 8.8 CVE-2011-3129 <= 3.1.2 3.1.3
  70. WordPress Core < 3.1.1 - Denial of Service
    Wysoka · 7.5 CVE-2011-4957 < 3.1.1 3.1.1
  71. WordPress Core 2.9.2 and 3.0.4 - Sensitive Information Disclosure
    Wysoka · 7.5 CVE-2011-3818 = 2.9.2, = 3.0.4 3.0, 3.0.5
  72. WordPress Core <= 3.0.1 - SQL Injection
    Wysoka · 8.8 CVE-2010-4257 <= 3.0.1 3.0.2
  73. WordPress Core <= 2.8.5 - Arbitrary File Upload
    Wysoka · 8.8 CVE-2009-3890 <= 2.8.5 2.8.6
  74. WordPress Core < 2.8.4 - Forced Password Reset
    Wysoka · 7.5 CVE-2009-2762 <= 2.8.3 2.8.4
  75. WordPress Core < 2.8.3 - Authorization Bypass
    Wysoka · 7.3 CVE-2009-2853 <= 2.8.2 2.8.3
  76. WordPress Core < 2.8.3 - Missing Authorization
    Wysoka · 7.3 CVE-2009-2854 <= 2.8.2 2.8.3
  77. WordPress Core <= 2.8.1 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2009-2851 <= 2.8.1 2.8.2
  78. WordPress Core < 2.6.5 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2008-5278 <= 2.6.4 2.6.5
  79. WordPress Core < 2.6.2 - Arbitrary User Password Reset
    Wysoka · 8.1 CVE-2008-4106 <= 2.6.1 2.6.2
  80. WordPress Core < 2.6 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2008-3233 < 2.6 2.6
  81. WordPress Core <= 2.5.1 - Arbitrary File Upload
    Wysoka · 7.2 CVE-2008-2392 <= 2.5.1 2.5.2
  82. WordPress Core <= 2.3.3 - Directory Traversal
    Wysoka · 7.5 CVE-2008-4769 <= 2.3.3, = 2.5 2.5.1
  83. WordPress Core < 2.5.1 - Authentication Bypass
    Wysoka · 8.1 CVE-2008-1930 <= 2.5 2.5.1
  84. WordPress Core 1.5 - 2.3.1 - Authorization Bypass
    Krytyczna · 9.8 CVE-2007-6013 >= 1.5, <= 2.3.1 2.3.2
  85. WordPress Core < 2.2.3 & WordPress MU < 1.2.5a - SQL Injection
    Krytyczna · 9.8 CVE-2007-4894 < 2.2.3 2.2.3
  86. WordPress Core < 2.3.3 & WordPress MU < 1.3.2 - Remote Code Execution
    Wysoka · 8.8 CVE-2008-5695 <= 2.3.2 2.3.3
  87. WordPress Core < 2.3.2 - SQL Injection
    Krytyczna · 9.8 CVE-2007-6318 <= 2.3.1 2.3.2
  88. WordPress Core <= 2.2.1 - SQL Injection
    Wysoka · 8.8 CVE-2007-4154 <= 2.0.10, >= 2.2, <= 2.2.1 2.0.11, 2.2.2
  89. WordPress Core <= 2.2 - Arbitrary File Upload
    Wysoka · 8.8 CVE-2007-3543 <= 2.2 2.2.1
  90. WordPress Core <= 2.2.1 - Arbitrary File Upload
    Wysoka · 8.8 CVE-2007-3544 <= 2.2.1 2.2.2
  91. WordPress Core <= 2.2 - SQL Injection
    Wysoka · 8.8 CVE-2007-3140 <= 2.2 2.2.1
  92. WordPress Core <= 2.0.9 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2008-0192 <= 2.0.9 2.0.10
  93. WordPress Core < 2.1.3 - SQL Injection
    Wysoka · 8.8 CVE-2007-1897 < 2.1.3 2.1.3
  94. WordPress Core 2.2.1 - Backdoor
    Krytyczna · 9.8 CVE-2007-1277 = 2.2.1 2.2.2
  95. WordPress Core 2.1.1 - Supply Chain Compromise
    Krytyczna · 9.8 6711f542-8b75-4968-86ac-9686ded775b7 = 2.1.1 2.1.2
  96. WordPress Core < 2.09 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2007-1049 < 2.0.9, = 2.1 2.0.9, 2.1.1
  97. WordPress Core < 2.0.7 - SQL Injection
    Wysoka · 8.8 CVE-2007-0233 <= 2.0.6 2.0.7
  98. WordPress Core <= 2.0.5 - SQL Injection
    Krytyczna · 9.8 CVE-2007-0107 <= 2.0.5 2.0.6
  99. WordPress Core <= 2.0.5 - Cross-Site Request Forgery to Cross-Site Scripting
    Wysoka · 8.8 CVE-2007-0106 <= 2.0.5 2.0.6
  100. WordPress Core < 2.0.4 - Privilege Escalation
    Krytyczna · 9.8 CVE-2006-4028 < 2.0.4 2.0.4
  101. WordPress Core < 2.0.3 - Remote Code Execution
    Wysoka · 8.8 CVE-2006-2667 <= 2.0.2 2.0.3
  102. WordPress Core <= 2.0.1 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2006-0985 <= 2.0.1 2.0.2
  103. WordPress Core < 2.0.2 - Sensitive Information Disclosure
    Wysoka · 7.5 CVE-2006-0986 <= 2.0.1 2.0.2
  104. WordPress Core <= 1.5.2 - SQL Injection
    Wysoka · 7.2 CVE-2006-1012 <= 1.5.2 2.0
  105. WordPress Core < 1.5.2 - Remote Code Execution
    Wysoka · 8.8 CVE-2005-2612 <= 1.5.1.3 1.5.2
  106. WordPress Core < 1.5.1.3 - Sensitive Information Disclosure
    Wysoka · 7.3 CVE-2005-2110 <= 1.5.1.2 1.5.1.3
  107. WordPress Core <= 1.5.1.2 - Cross-Site Scripting
    Wysoka · 7.2 CVE-2005-2107 <= 1.5.1.2 1.5.1.3
  108. WordPress Core < 1.5.1.3 - SQL Injection
    Wysoka · 8.8 CVE-2005-2108 < 1.5.1.3 1.5.1.3
  109. WordPress Core < 1.5.1.2 - SQL Injection
    Wysoka · 8.8 CVE-2005-1810 <= 1.5.1.1 1.5.1.2
  110. WordPress Core < 1.5.1 - SQL Injection
    Wysoka · 8.8 CVE-2005-1687 < 1.5.1 1.5.1
  111. WordPress Core < 0.72 - SQL Injection
    Wysoka · 8.8 CVE-2003-1598 < 0.72 0.72
  112. WordPress Core <= 0.70 - Remote File Inclusion
    Krytyczna · 9.8 CVE-2003-1599 <= 0.70 0.71

Dowiedz się, które podatności dotyczą Twojej aplikacji

Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.

Podłącz swoją aplikację
Newsletter DockRay

Bezpieczeństwo aplikacji w Twojej skrzynce

Najważniejsze podatności, konkretne zalecenia i praktyczne wskazówki dla Twoich aplikacji. Wybierz technologie i śledź to, co ma znaczenie dla Twojego projektu.

  • Codzienne zestawienie nowych podatności, także krytycznych.
  • Powiadomienia o ważnych aktualizacjach.
  • Praktyczne porady o bezpieczeństwie i monitoringu aplikacji.

Pozostaw puste, aby otrzymywać informacje o wszystkich technologiach.

Polityka prywatności

Zapis jest bezpłatny. Wypiszesz się jednym kliknięciem w wiadomości.