'

漏洞组件 — WordPress

漏洞详情：
WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL 数据库的服务器上架设自己的网志。也可以把 WordPress 当作一个内容管理系统（CMS）来使用。WordPress 是一个免费的开源项目，在GNU通用公共许可证下授权发布。 WordPress 被认为是Michel Valdrighi所开发的网志平台b2 cafelog的正式继承者。“WordPress”这个名字出自 Christine Selleck 的主意，他是主要开发者Matt Mullenweg的朋友。

相关漏洞

SSV ID 漏洞名称
SSV-61703 WordPress The Cotton Theme任意文件上传漏洞
SSV-61664 WordPress Relevanssi插件"category_name" SQL注入漏洞
SSV-61674 WordPress BSK PDF Manager插件跨站脚本漏洞
SSV-61678 WordPress VideoWhisper Live Streaming Integration多个信息泄漏漏洞
SSV-61675 WordPress Post to PDF 'options.php'跨站脚本漏洞
SSV-61677 WordPress VideoWhisper Live Streaming Integration多个跨站脚本漏洞
SSV-61679 WordPress VideoWhisper Live Streaming Integration任意文件上传漏洞
SSV-61673 WordPress Alpine PhotoTile for Instagram插件跨站脚本漏洞
SSV-61676 WordPress PrintFriendly插件'options.php'多个跨站脚本漏洞
SSV-61656 WordPress Google Analytics MU插件跨站请求伪造漏洞
SSV-61638 WordPress MP3-jPlayer插件跨站请求伪造漏洞
SSV-61614 WordPress VideoWhisper Live Streaming Integration多个目录遍历漏洞
SSV-61599 WordPress Feedweb Plugin '_wp_http_referer'参数跨站脚本漏洞
SSV-61597 WordPress Zedity插件'zaction'参数跨站脚本漏洞
SSV-61598 WordPress Thank You Counter Button多个跨站脚本漏洞
SSV-61600 WordPress Easy Media Gallery多个跨站脚本漏洞
SSV-61576 WordPress Search Everything插件SQL注入漏洞
SSV-61558 WordPress Media File Renamer插件多个HTML注入漏洞
SSV-61533 WordPress AdRotate插件'clicktracker.php'SQL注入漏洞
SSV-61532 WordPress DZS-VideoGallery ‘ajax.php’跨站脚本漏洞
SSV-61475 WordPress NextGEN Gallery目录遍历漏洞
SSV-61476 WordPress BP Group Documents多个漏洞
SSV-61466 Wordpress Buddypress插件'name'字段HTML注入漏洞
SSV-61445 WordPress Kiddo Theme "uploadify.php"任意文件上传漏洞
SSV-61435 Wordpress Frontend Upload插件任意文件上传漏洞
SSV-61371 WordPress global flash galleries插件远程文件上传漏洞
SSV-61342 WordPress DT Chocolate跨站脚本漏洞
SSV-61314 WordPress NextGen Gallery跨站脚本漏洞
SSV-61306 WordPress Intouch跨站脚本漏洞
SSV-61299 WordPress Page Layout Builder插件"layout_settings_id"跨站脚本漏洞
SSV-61298 WordPress Foliopress WYSIWYG插件跨站脚本漏洞
SSV-61295 WordPress WordPress Connect跨站脚漏洞
SSV-61301 WordPress Zingiri Web Shop插件未明安全漏洞
SSV-61283 WordPress Custom Website Data插件跨站请求伪造漏洞
SSV-61259 Advanced Dewplayer Plugin for WordPress 'download-file.php'脚本目录遍历漏洞
SSV-61227 Wordpress WP-Cron Dashboard插件跨站脚本漏洞
SSV-61228 Wordpress AskApache Firefox Adsense插件跨站请求伪造漏洞
SSV-61229 Wordpress Ad-minister插件跨站脚本漏洞
SSV-61221 WordPress Persuasion 主题'dl-skin.php'任意文件访问漏洞
SSV-61156 WordPress OptimizePress插件任意文件上传漏洞
SSV-61097 WordPress 3.5.1远程代码执行漏洞
SSV-61058 WordPress Woopra plugin remote PHP arbitrary code execution exploit.
SSV-61019 WordPress特制字符串URL重定向限制绕过漏洞
SSV-61022 WordPress get_allowed_mime_types函数(wp-includes/functions.php)存在跨站脚本漏洞
SSV-61021 WordPress /wp-admin/includes/post.php user_ID 参数操作权限提升漏洞
SSV-61020 WordPress 'is_serialized()'远程任意代码执行漏洞(CVE-2013-4338)
SSV-60950 WordPress Xhanch - My Twitter插件跨站请求伪造漏洞(CVE-2013-3253)
SSV-60916 WordPress Duplicator 0.4.4 Cross Site Scripting
SSV-60904 WordPress /wp-admin/users.php畸形s参数路径泄漏漏洞
SSV-62406 wordpress 3.3.1 /wp-includes/js/swfupload/swfupload.swf buttontText 跨站脚本漏洞
SSV-60863 WordPress 3.5.1 crypt_private()远程拒绝服务漏洞(CVE-2013-2173)
SSV-60842 WordPress Content Slide插件跨站请求伪造漏洞
SSV-62373 wordpress 3.5 /wp-includes/js/plupload/plupload.flash.swf 跨站脚本漏洞
SSV-62371 wordpress 3.3.1 /wp-includes/js/swfupload/swfupload.swf 跨站脚本漏洞
SSV-62343 WordPress plugin AllVideoGallery 1.1 /wp-content/plugins/all-video-gallery/config.php SQL注入漏洞
SSV-62339 WordPress Plugin LeagueManager 3.8 /wp-content/plugins/leaguemanager/leaguemanager.php SQL注入漏洞
SSV-62342 WordPress plugin HDWebplayer 1.1 /wp-content/plugins/hd-webplayer/config.php SQL注入漏洞
SSV-60737 Wordpress Spider Video Player plugin SQL Injection
SSV-60690 WordPress LeagueManager插件'league_id'参数SQL注入漏洞
SSV-60619 Wordpress Gallery插件'load'参数远程文件包含漏洞
SSV-60569 WordPress Store Locator Plus 插件'query'参数SQL注入漏洞
SSV-60568 WordPress Browser Rejector 插件"wppath"远程文件包含漏洞
SSV-60547 WordPress插件W3 Total 缓存数据信息泄露漏洞
SSV-60543 WordPress 多个CMSMasters主题'upload.php'任意文件上传漏洞
SSV-60532 WordPress 'wp-login.php'安全绕过漏洞(CVE-2012-5868)
SSV-60495 WordPress WP-Realty 插件'language'参数本地文件包含漏洞
SSV-60459 WordPress AJAX Post Search插件'the_search_function()'函数SQL注入漏洞
SSV-60419 Wordpress Remote Command Execution
SSV-60362 WordPress BBPress SQL Injection / Path Disclosure
SSV-60317 WordPress SimpleMail Plugin Email字段脚本插入漏洞
SSV-62290 WordPress <=3.4.1 registration-functions.php绝对路径泄露漏洞
SSV-60249 WordPress 3.x 信息泄露及非法操作漏洞
SSV-60240 WordPress Website FAQ Plugin v1.0 SQL Injection
SSV-60223 WordPress Automatic Plugin &quot;q&quot; SQL注入漏洞
SSV-60196 WordPress wpStoreCart 2.5.29 Shell Upload
SSV-60195 WordPress RBX Gallery 2.1 Shell Upload
SSV-60193 Wordpress Front End Upload 0.5.3 Arbitrary File Upload
SSV-60087 WordPress Anti-CSRF令牌安全绕过漏洞
SSV-30139 Wordpress SB Uploader Plugin Shell Upload Vulnerability
SSV-88119 wordpress <3.3.1 wp-comments-post.php跨站脚本漏洞
SSV-30045 WordPress 3.3.1 Code Execution / Cross Site Scripting
SSV-30043 AllWebMenus WordPress Menu Plugin Arbitrary file upload
SSV-30018 WordPress Blog Cross Site Scripting
SSV-30005 WordPress Comment Rating SQL Injection
SSV-30004 Reflected Cross Site Scripting in wordpress 3.3
SSV-26130 WordPress WP Symposium插件任意文件上传漏洞
SSV-26131 WordPress邮件列表插件任意文件下载漏洞
SSV-26035 WordPress Pretty Link 1.5.2 Cross Site Scripting
SSV-26006 WordPress Flash Album Gallery Cross Site Scripting
SSV-24261 Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities
SSV-24253 Wordpress enable-latex plugin Remote File Include Vulnerabilities
SSV-24241 WordPress Advanced Text Widget plugin suffers from a cross site scripting vulnerability
SSV-24242 WordPress Adminimize plugin suffers from a cross site scripting vulnerability
SSV-24225 WordPress jetpack plugin SQL Injection Vulnerability
SSV-23198 WordPress AdRotate plugin <= 3.6.6 SQL Injection Vulnerability
SSV-23193 Wordpress Zingiri Plugin &lt;= 2.2.3 (ajax_save_name.php) Remote Code Execution
SSV-23158 WordPress WP Glossary plugin SQL Injection Vulnerability
SSV-23154 WordPress WP Glossary Plugin SQL Injection
SSV-23153 WordPress Classipress Theme &lt;= 3.1.4 Stored XSS
SSV-23147 WordPress wptouch plugin SQL Injection Vulnerability
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English