wordpress Vulnerability Advisory Catalog

Total 391 security vulnerabilities recorded for wordpress software and firmware.

← Back to All Vendors
CVE-2005-2107 UNKNOWN
Component: wordpress

Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script...

📅 2005-07-05
CVSS 4.3 Dossier →
CVE-2005-1810 UNKNOWN
Component: wordpress

SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $c...

📅 2005-06-01
CVSS 7.5 Dossier →
CVE-2005-1688 MEDIUM
Component: wordpress

Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-incl...

📅 2005-05-20
CVSS 5.3 Dossier →
CVE-2005-1687 UNKNOWN
Component: wordpress

SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id p...

📅 2005-05-20
CVSS 7.5 Dossier →
CVE-2005-1102 UNKNOWN
Component: wordpress

Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbi...

📅 2005-05-02
CVSS 6.8 Dossier →
CVE-2004-1584 UNKNOWN
Component: wordpress

CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HT...

📅 2004-12-31
CVSS 5.0 Dossier →
CVE-2004-1559 UNKNOWN
Component: wordpress

Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirec...

📅 2004-12-31
CVSS 4.3 Dossier →
Page 17 of 17 (391 Total Records)