'

漏洞组件 — WordPress

漏洞详情：
WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL 数据库的服务器上架设自己的网志。也可以把 WordPress 当作一个内容管理系统（CMS）来使用。WordPress 是一个免费的开源项目，在GNU通用公共许可证下授权发布。 WordPress 被认为是Michel Valdrighi所开发的网志平台b2 cafelog的正式继承者。“WordPress”这个名字出自 Christine Selleck 的主意，他是主要开发者Matt Mullenweg的朋友。

相关漏洞

SSV ID 漏洞名称
SSV-89528 WordPress StageShow Plugin 'stageshow_redirect.php' 重定向漏洞
SSV-89527 WordPress Vertical Image Slider 1.0 CSRF / XSS
SSV-89524 WordPress Video Gallery 2.7 SQL Injection
SSV-89497 WordPress Landing Pages 1.8.4 Cross Site Scripting ( CVE-2015-4065 )
SSV-89488 WordPress WP-Shop 3.4.3.18 Cross Site Scripting
SSV-89480 WordPress <= 4.3.0 权限提升漏洞
SSV-89479 WordPress <= 4.3.0 跨站脚本漏洞
SSV-89478 WordPress <=4.2.2 由竞争条件导致的权限提升
SSV-89463 WordPress CP Reservation Calendar Plugin 1.1.6 - SQL Injection
SSV-89423 WordPress Car Rental System SQL Injection Vulnerability
SSV-89411 WordPress White-Label Framework 2.0.6 - XSS Vulnerability
SSV-89403 WordPress media-file-manager-advanced Plugin Multiple Vulnerabilites
SSV-89356 WordPress Aviary Image Editor Add On For Gravity Forms Plugin 3.0 /includes/upload.php File Upload
SSV-89311 WordPress <= 4.2 - Stored XSS
SSV-89309 WordPress CP Multi View Event Calendar Plugin 1.1.7 - SQL Injection
SSV-89299 WordPress Responsive Thumbnail Slider Plugin 1.0 - Arbitrary File Upload
SSV-89294 WordPress WP Symposium插件SQL注入漏洞
SSV-89284 Wordpress Plugin 'WP Mobile Edition' LFI Vulnerability
SSV-89281 WordPress Swim Team Plugin 1.44.10777 - Arbitrary File Download
SSV-89278 Google Analyticator Multiple XSS Vulnerabilities
SSV-89277 WordPress NewStatPress Plugin 0.9.8 xss+sql注入
SSV-89276 WordPress Shopping Cart 3.0.4 --任意文件上传
SSV-89269 WordPress Googmonify Plugin 0.8.1 - XSS/CSRF
SSV-89217 WordPress Booking Calendar Contact Form Plugin 1.0.2 /dex_bccf.php SQL注入漏洞
SSV-89180 WordPress TheCartPress Plugin 1.3.9 /checkout/CheckoutEditor.class.php 本地文件包含漏洞
SSV-89179 WordPress example.html 跨站脚本漏洞
SSV-89166 Wordpress N-Media Website Contact Form 1.3.4 /classes/plugin.class.php 文件上传漏洞
SSV-89167 Wordpress Reflex Gallery 3.1.3 /reflex-gallery-php.php 文件上传漏洞
SSV-89158 Wordpress MiwoFTP 1.0.4 /admin/quixplorer/_include/fun_down.php 任意文件下载漏洞
SSV-89159 Wordpress Tune Library Plugin 1.5.4 /tune-library.php SQL注入漏洞
SSV-89142 Wordpress Video Gallery Plugin 2.8 /hdflvvideoshare.php SQL注入漏洞
SSV-89141 WordPress VideoWhisper Video Presentation Plugin 3.31.17 /vp/vw_upload.php 文件上传漏洞
SSV-89091 WordPress Aspose DOC Exporter Plugin 1.0任意文件上传漏洞
SSV-89087 WordPress InBoundio Marketing Plugin 1.0 /admin/partials/csv_uploader.php 文件上传漏洞
SSV-89088 WordPress Marketplace Plugin 2.4.0 /modules/additional-preview-images.php 文件上传漏洞
SSV-89089 WordPress SEO by Yoast 1.7.3.3 /admin/class-bulk-editor-list-table.php SQL注入漏洞
SSV-89086 WordPress BePro Listings Plugin 2.1.995 /bepro_listings.php SQL注入漏洞
SSV-89081 WordPress BePro Listings Plugin 2.1.995 /bepro_listings_functions.php 文件上传漏洞
SSV-89071 Wordpress MainWP Child Plugin 2.0.9.1 /class/MainWPChild.class.php 登录绕过漏洞
SSV-89070 Wordpress Gravity Forms 1.8.19 /include/upload.php 文件上传漏洞
SSV-89053 WordPress Video_Gallery Plugin 2.7.0 /videogalleryrss.php SQL注入漏洞
SSV-89048 WordPress Plugin Revslider 4.1.4 /inc_php/framework/base_admin.class.php 文件上传漏洞
SSV-89051 Wordpress Plugin Ajax-Store-Locator 1.2 /ajax-store-locator-wordpress_0/sl_file_download.php 任意文件下载漏洞
SSV-89052 WordPress Survey_and_poll Plugin 1.1 /settings.php SQL注入漏洞
SSV-89049 WordPress Plugin DB_Backup 4.5 /download.php 任意文件下载漏洞
SSV-89054 WordPress Symposium 14.11 /server/php/index.php 文件上传漏洞
SSV-89050 WordPress Plugin EasyCart 3.0.4 /inc/amfphp/administration/banneruploaderscript.php 文件上传漏洞
SSV-89047 Wordpress Cform2 14.7 文件上传漏洞
SSV-89038 Wordpress Download Manager 2.7.4 /wp-content/plugins/download-manager/wpdm-core.php 代码执行漏洞
SSV-89036 WordPress Platform Theme 1.4.3 /includes/library.options.php 本地文件包含漏洞
SSV-89035 Wordpress多个主题任意文件下载漏洞
SSV-89037 WordPress /wp-content/plugins/html5-mp3-player-with-playlist/html5plus/playlist.php 信息泄露漏洞
SSV-88989 Wordpress wpDataTables Plugin 1.5.3 文件上传漏洞
SSV-88987 Wordpress 3.9.2 /wp-includes/formatting.php 跨站脚本漏洞
SSV-88990 Wordpress wpDataTables Plugin 1.5.3 /wpdatatables.php SQL注入漏洞
SSV-88988 Wordpress Google Document Embedder 2.5.16 ~view.php SQL注入漏洞
SSV-88963 Wordpress CP Multi View Event Calendar 1.01 /php-datafeed.php SQL注入漏洞
SSV-88962 wordpress infusionsoft 1.5.10 /wp-content/plugins/infusionsoft/Infusionsoft/utilities/code_generator.php 文件上传漏洞
SSV-87320 Wordpress InfusionSoft Plugin Upload Vulnerability
SSV-87305 Wordpress Slideshow Gallery 1.4.6 - Shell Upload (Python Exploit)
SSV-87286 Wordpress All In One WP Security Plugin 3.8.2 - SQL Injection
SSV-87290 Wordpress Login Widget With Shortcode 3.1.1 - Multiple Vulnerabilities
SSV-88864 Wordpress Like Dislike Counter 1.2.3 /wp-content/plugins/like-dislike-counter-for-posts-pages-and-comments/ajax_counter.php SQL注入漏洞
SSV-87258 Wordpress WP Support Plus Responsive Ticket System 2.0 Plugin - Multiple Vulnerabilities
SSV-87244 WordPress Acento Theme (view-pdf.php, file param) - Arbitrary File Download
SSV-87236 Wordpress Plugins Premium Gallery Manager Unauthenticated Configuration Access Vulnerability
SSV-88858 WordPress Acento-Theme /wp-content/themes/acento/includes/view-pdf.php 任意文件下载漏洞
SSV-88841 WordPress download-shortcode 1.1 /wp-content/force-download.php 本地文件包含漏洞
SSV-88837 WordPress Themes /image_view.class.php 任意文件下载漏洞
SSV-87217 WordPress Slideshow Gallery Plugin 1.4.6 - Shell Upload Vulnerability
SSV-87214 WordPress ShortCode Plugin 1.1 - Local File Inclusion Vulnerability
SSV-87220 Wordpress Huge-IT Image Gallery 1.0.1 Authenticated SQL Injection
SSV-87219 Mulitple WordPress Themes (admin-ajax.php, img param) - Arbitrary File Download
SSV-88820 Wordpress 2.6.6 /wysija_newsletters/trunk/helpers/back.php 任意文件创建漏洞
SSV-87183 WordPress 3.9.2 /xmlrpc.php 拒绝服务漏洞 poc
SSV-87155 Wordpress Video Gallery Plugin 2.5 - Multiple Vulnerabilities
SSV-87122 Wordpress MailPoet (wysija-newsletters) Unauthenticated File Upload
SSV-70777 Wordpress Plugin jQuery Mega Menu 1.0 本地文件包含漏洞
SSV-72032 WordPress SH Slideshow plugin <= 3.1.4 - SQL Injection Vulnerability
SSV-88682 Wordpress Theme Elegance /dl-skin.php 任意文件下载漏洞
SSV-88681 Wordpress Theme Infocus /dl-skin.php 任意文件下载漏洞
SSV-88678 WordPress Participants database v1.5.4.8 SQL注入漏洞
SSV-62633 Wordpress linenity theme 2.0 /functions/download.php 本地文件包含漏洞
SSV-62213 WordPress Unconfirmed Plugin 's'插件跨站脚本漏洞
SSV-62212 WordPress Jetpack插件安全绕过漏洞
SSV-62159 WordPress HK Exif Tags插件EXIF标签脚本注入漏洞
SSV-62038 WordPress Disable Comments插件跨站请求伪造漏洞
SSV-62042 WordPress GD Star Rating插件跨站请求伪造漏洞
SSV-62017 WordPress Ajax Pagination插件'admin-ajax.php'本地文件包含漏洞
SSV-62018 WordPress HTML Sitemap插件'inc/AdminPage.php'跨站请求伪造漏洞
SSV-61949 WordPress 3.8.1 /xmlrpc.php拒绝服务漏洞
SSV-61884 WordPress WP-Filebase Download Manager插件任意代码执行漏洞
SSV-61875 WordPress User Domain Whitelist插件跨站请求伪造漏洞
SSV-62605 WordPress 3.8.1 /xmlrpc.php 拒绝服务漏洞
SSV-61845 WordPress Subscribe To Comments Reloaded插件跨站请求伪造漏洞
SSV-61853 WordPress XCloner插件跨站请求伪造漏洞
SSV-61795 WordPress LayerSlider插件跨站请求伪造漏洞
SSV-62601 WordPress 插件AdRotate 3.9.4 /wp-content/plugins/adrotate/library/clicktracker.php SQL注入漏洞
SSV-61786 WordPress WP SlimStat插件URL脚本注入漏洞
SSV-61702 WordPress Welcart e-Commerce插件跨站脚本和SQL注入漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English