'

漏洞组件 — WordPress

漏洞详情：
WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL 数据库的服务器上架设自己的网志。也可以把 WordPress 当作一个内容管理系统（CMS）来使用。WordPress 是一个免费的开源项目，在GNU通用公共许可证下授权发布。 WordPress 被认为是Michel Valdrighi所开发的网志平台b2 cafelog的正式继承者。“WordPress”这个名字出自 Christine Selleck 的主意，他是主要开发者Matt Mullenweg的朋友。

相关漏洞

SSV ID 漏洞名称
SSV-91580 Wordpress fresh-page 插件-phpThumb.php文件src参数-跨站脚本漏洞
SSV-91579 Wordpress optinfirex 插件-/lp/index.php文件id参数-跨站脚本漏洞
SSV-91578 Wordpress Recommend-a-friend 插件-raf_form.php文件current_url参数-跨站脚本漏洞
SSV-91570 WordPress leenk.me Plugin 2.5.0 - CSRF/XSS
SSV-91569 Wordpress Plugin IMDb Profile Widget 1.0.8 - Local File Inclusion
SSV-91568 WordPress Photocart Link Plugin 1.6 - Local File Inclusion
SSV-91561 Wordpress Seo Link Rotator 插件-pusher.php文件title参数--跨站脚本漏洞
SSV-91543 WordPress 插件 Brandfolder v3.0 本地文件包含漏洞
SSV-91542 WordPress Memphis Document Library Plugin 3.1.5 - Arbitrary File Download
SSV-91527 WordPress SOME bug in plupload.flash.swf
SSV-91521 Wordpress Js-Multi-Hotel 插件-refreshDate.php文件-跨站脚本漏洞
SSV-91520 WordPress Blooog-v1.1 Theme-jplayer.swf文件-跨站脚本漏洞
SSV-91515 WordPress 4.2.0-4.5.1 flashmediaelement.swf 反射型 XSS 漏洞
SSV-91511 WordPress Dharma booking Plugin 2.38.3 本地文件包含漏洞
SSV-91505 Wordpress Popup Images 插件-popup.php文件-跨站脚本漏洞
SSV-91504 Wordpress SS Downloads 插件-emailform.php文件-跨站脚本漏洞
SSV-91503 Wordpress Photocrati theme-ecomm-sizes.php文件prod_id参数-跨站脚本漏洞
SSV-91502 WordPress WP-Password 插件-login.php文件err参数-跨站脚本漏洞
SSV-91474 WordPress Abtest本地文件包含漏洞
SSV-91463 Wordpress 4.5.1 Remote Command Execute
SSV-91439 Wordpress kento-post-view-counter 插件 存储型 XSS
SSV-91435 WordPress Robo Gallery 2.0.14 Code Execution
SSV-91428 WordPress 支付插件SQL 注入漏洞
SSV-91424 Wordpress spreadsheet 插件-spreadsheet.php文件page参数-跨站脚本漏洞
SSV-91372 WordPress Community Events Plugin 1.3.5 - SQL Injection Vulnerability
SSV-91371 Wordpress Memphis Document Library 插件3.1.5-mdocs-img-preview-任意文件下载漏洞
SSV-91370 Wordpress EZLeadPro 插件-lp/index.php文件id参数-跨站脚本漏洞
SSV-91369 Wordpress Conversionninja 插件-/lp/index.php文件-跨站脚本漏洞
SSV-91332 WordPress Memphis Document Library Plugin 2.3 - 3.1.5任意文件下载漏洞
SSV-91315 WordPress Import CSV Plugin 1.0 - Directory Traversal
SSV-91311 WordPress Abtest Plugin - Local File Inclusion
SSV-91295 Wordpress Scoreme主题跨站漏洞
SSV-91283 Wordpress Spider Video Player插件-settings.php文件-跨站脚本漏洞
SSV-91282 Wordpress MyBand插件-timthumb.php文件-跨站脚本漏洞
SSV-91281 Wordpress SI CAPTCHA AntiSpam 插件-test/index.php-跨站脚本漏洞
SSV-91253 Wordpress Site Import Plugin 1.0.1 - Local and Remote File Inclusion
SSV-91252 WordPress DZS Videogallery Plugin <=8.60 - Multiple Vulnerabilities
SSV-91251 Wordpress Beauty & Clean Theme 1.0.8 - Arbitrary File Upload Vulnerability
SSV-91235 Wordpress Bonuspressx插件-ar_submit.php文件-跨站脚本漏洞
SSV-91234 WordPress FR0_theme插件-down.php文件-任意文件下载漏洞
SSV-91233 WordPress Category-Page-Icons插件-wpdev-flash-uploader.php文件-文件上传漏洞
SSV-91232 Wordpress mTheme Unus-css.php文件-本地文件包含漏洞
SSV-91231 Wordpress Begin 插件-go.php-url重定向漏洞
SSV-91230 Wordpress Formcraft插件-upload.php-文件上传漏洞
SSV-91229 Wordpress Goodnews 插件-跨站脚本漏洞
SSV-91228 Wordpress Music Store 插件 v1.0.14-ms-submit.php-URL重定向漏洞
SSV-91216 wordpress SP Projects and Document Manager V 2.5.9.6 XSS 漏洞
SSV-91215 WordPress Altos Connect Widget 1.3.0 XSS 漏洞
SSV-91213 WordPress的ProjectTheme2.0.9.5多个漏洞(XSS/CSRF)
SSV-91211 WordPress eBook Download Plugin 1.1 - 任意文件下载
SSV-91181 WordPress Twenty Fifteen Theme-DOM型跨站脚本漏洞
SSV-91180 Wordpress PHP Event Calendar 插件-任意文件上传漏洞
SSV-91179 WordPress WPML reminder_popup 跨站脚本漏洞
SSV-91178 WordPress WP All 3.2.3 文件上传漏洞
SSV-91177 Wordpress force-download.php 任意文件下载漏洞
SSV-91176 WordPress Fusion Theme 3.1版本后台文件上传漏洞
SSV-91173 WordPress HB Audio Gallery Lite Plugin 1.0.0 - 任意文件下载
SSV-91165 WordPress Booking Calendar Contact Form 1.0.23 盲注
SSV-91146 Wordpress RedSteel Theme-download.php任意文件下载漏洞
SSV-91144 WordPress WP User Frontend插件3.4.6文件上传漏洞
SSV-91134 WordPress Bulk Delete Plugin 5.5.3 - 提权
SSV-91128 wordpress 插件 site-import V1.0.1 文件包含漏洞
SSV-91081 WordPress CIP4 Folder Download 1.10 本地文件包含漏洞
SSV-91045 Wordpress slideoptinprox插件ar_submit.php文件跨站脚本漏洞
SSV-91006 Wordpress clikstats插件ck.php文件URL重定向漏洞
SSV-91005 WordPress WooCommerce 2.4.12 远程命令执行漏洞
SSV-91004 Wordpress Formcraft 插件upload.php文件上传漏洞
SSV-91001 Wordpress Newsletter Pro插件do.php文件-URL重定向漏洞
SSV-90994 WordPress Booking Calendar Contact Form<=1.1.24 - cpabc_appointments.php文件addslashes SQL Injection V
SSV-90993 Wordpress Booking Calendar Contact Form Plugin <=1.1.23 - Shortcode SQL注入漏洞
SSV-90989 WordPress预订日历联系表单1.1.24 多个漏洞 (XSS, CSRF)
SSV-90952 wordpress Begin Themes go.php 参数url URL重定向漏洞
SSV-90940 wordpress comment-rating-plugin edit-comments.php文件tab参数跨站脚本漏洞
SSV-90891 WordPress 插件 WP Easy Gallery v4.1.4 存储xss
SSV-90833 WordPress appointment-booking-calendar <=1.1.23 - Unauthenticated SQL injection
SSV-90800 WordPress /wp-content/plugins/extredj/red.php Open Redirection
SSV-90791 wordpress Extredj插件 red.php 参数ext URL重定向漏洞
SSV-90727 Wordpress Extredj Plugin URL 重定向漏洞
SSV-90711 WordPress 备份与恢复插件 WP Backitup Lite 数据库备份文件泄露漏洞
SSV-90559 Wordpress Tubepress 插件 v2.0 popup.php 参数 name XSS 漏洞
SSV-90550 Commentator WordPress Plugin 2.5.2 XSS Vulnerability
SSV-90509 WP 插件 NEX-Forms Lite 2.1.0 XSS 漏洞
SSV-90491 WP 插件 Easy2Map Photos 1.0.9 SQL注入漏洞
SSV-90487 WordPress AzonPop插件1.0.0版本在/wp-content/plugins/AzonPop/files/view/showpopup.php存在SQL注入漏洞
SSV-90484 WP 插件 Easy Poll 1.1.3 XSS 漏洞
SSV-90451 wordpress的Stanford theme在wp-content/themes/stvp/jwplayer.php处存在XSS漏洞
SSV-90260 wordpress <4.4.1 wp-admin/customize.php 页面 xss
SSV-90231 WordPress Revslider 插件任意文件上传漏洞与任意文件下载漏洞
SSV-89959 WordPress theme parallelus-salutation Arbitrary File Download Vulnerability
SSV-89871 WordPress < 4.1.2 Stored XSS vulnerability
SSV-89867 Wordpress plugin Pods <= 2.4.3 XSS and CSRF vulnerabilities
SSV-89863 WordPress Work The Flow File Upload 2.5.2 - Arbitrary File Upload Vulnerability
SSV-89712 WordPress 利用 XMLRPC 爆破
SSV-89591 WordPress DB-Backup Plugin 4.5 /download.php 任意文件下载漏洞
SSV-89573 WordPress IBS Mappro插件 读取任意文件
SSV-87944 Shareaholic 7.6.0.3 XSS
SSV-89566 WordPress RevSlider 3.0.3 上传漏洞
SSV-89538 WordPress 3.8.2 cookie 伪造漏洞
SSV-89533 WordPress Esplanade 1.1.4 Theme Reflected XSS
SSV-89532 Wordpress Plugin Store Locator Plus 4.2.23 Email Injection
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English