'

漏洞组件 — WordPress

漏洞详情：
WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL 数据库的服务器上架设自己的网志。也可以把 WordPress 当作一个内容管理系统（CMS）来使用。WordPress 是一个免费的开源项目，在GNU通用公共许可证下授权发布。 WordPress 被认为是Michel Valdrighi所开发的网志平台b2 cafelog的正式继承者。“WordPress”这个名字出自 Christine Selleck 的主意，他是主要开发者Matt Mullenweg的朋友。

相关漏洞

SSV ID 漏洞名称
SSV-23112 Wordpress Mailing List 1.3.2远程文件包含漏洞
SSV-23109 WordPress Photo Album Plus <= 4.1.1 SQL注入漏洞
SSV-21028 WordPress Photo Album Plus <= 4.1.1 SQL Injection Vulnerability
SSV-21020 WordPress Pretty Link 1.4.56 Cross Site Scripting
SSV-21011 WordPress GD Star Rating plugin <= 1.9.10 SQL Injection
SSV-20970 WordPress Redirection 2.2.9 Persistent Cross Site Scripting
SSV-20966 WordPress WP Bannerize plugin <= 2.8.7 SQL Injection Vulnerability
SSV-20952 WordPress Link Library plugin <= 5.2.1 SQL Injection Vulnerability
SSV-20948 WordPress WP e-Commerce插件"cs1"参数SQL注入漏洞
SSV-20941 WordPress Count per Day plugin <= 2.17 SQL Injection Vulnerability
SSV-20940 WordPress Auctions plugin <= 1.8.8 SQL Injection Vulnerability
SSV-20929 WordPress WP e-Commerce plugin <= 3.8.6 SQL Injection Vulnerability
SSV-20914 WordPress Photoracer 1.0 Cross Site Scripting / SQL Injection
SSV-20918 WordPress Evarisk plugin <= 5.1.3.6 SQL Injection Vulnerability
SSV-20917 WordPress mySTAT plugin <= 2.6 SQL Injection Vulnerability
SSV-20919 WordPress Profiles plugin <= 2.0 RC1 SQL Injection Vulnerability
SSV-20907 WordPress Collision Testimonials plugin <= 3.0 SQL Injection Vulnerability
SSV-20906 WordPress Super CAPTCHA plugin <= 2.2.4 SQL Injection Vulnerability
SSV-20908 WordPress oQey Headers plugin <= 0.3 SQL Injection Vulnerability
SSV-20905 WordPress Js-appointment plugin <= 1.5 SQL Injection Vulnerability
SSV-20904 WordPress MM Forms Community plugin <= 1.2.3 SQL Injection Vulnerability
SSV-20903 WordPress Photoracer plugin <= 1.0 SQL Injection Vulnerability
SSV-20909 WordPress Photoracer Plugin <= 1.0 Multiple Vulnerabilities
SSV-20900 WordPress Yoast v4.1.3 Local File Disclosure Vulnerability
SSV-20897 Multiple XSS in WP-Stats-Dashboard
SSV-20892 WordPress MM Duplicate plugin <= 1.2 SQL Injection Vulnerability
SSV-20885 WordPress UnGallery plugin <= 1.5.8 Local File Disclosure Vulnerability
SSV-20883 WordPress Block-Spam-By-Math-Reloaded Plugin Bypass
SSV-20870 WordPress WP Forum plugin <= 1.7.8 SQL Injection Vulnerability
SSV-20874 WordPress WP Symposium plugin <= 0.64 SQL Injection Vulnerability
SSV-20871 WordPress WP DS FAQ plugin <= 1.3.2 SQL Injection Vulnerability
SSV-20875 WordPress Contus HD FLV Player plugin <= 1.3 SQL Injection Vulnerability
SSV-20873 WordPress Easy Contact Form Lite plugin <= 1.0.7 SQL Injection Vulnerability
SSV-20866 WordPress Global Content Blocks plugin <= 1.2 SQL Injection Vulnerability
SSV-20872 WordPress OdiHost Newsletter plugin <= 1.0 SQL Injection Vulnerability
SSV-20869 WordPress Ajax Gallery plugin <= 3.0 SQL Injection Vulnerability
SSV-20876 WordPress File Groups plugin <= 1.1.2 SQL Injection Vulnerability
SSV-20864 WordPress IP-Logger Plugin <= 3.0 SQL Injection Vulnerability
SSV-20847 Multiple XSS in eShop for Wordpress
SSV-20811 WordPress TimThumb Plugin - Remote Code Execution
SSV-88136 WordPress 3.1.3,3.1.4,3.2-RC1,3.2-RC3 edit-tags.php SQL注入
SSV-20683 WordPress 3.1.3 未明未授权访问漏洞
SSV-20688 WordPress 3.1.3 SQL Injection Vulnerabilities
SSV-20668 Wordpress Beer Recipes Plugin v.1.0 XSS
SSV-20667 Wordpress core 3.1.3 Persistent XSS Vulnerability
SSV-20519 WordPress '.phtml'文件任意文件上传漏洞
SSV-20514 WordPress 'press-this.php'远程安全绕过漏洞
SSV-20409 Wordpress plugin BackWPup Remote and Local Code Execution Vulnerability
SSV-20339 WordPress User Photo Component Remote File Upload Vulnerability
SSV-20336 WordPress 3.04 XSS
SSV-20258 WordPress Event Registration插件event_id参数SQL注入漏洞
SSV-20225 WordPress cformsII插件rs和rsargs参数脚本注入漏洞
SSV-20100 Wordpress Events Manager Extended Plugin Persistent XSS Vulnerability
SSV-20067 WordPress 3.0.1 wp-admin/plugins.php模块跨站脚本漏洞
SSV-19975 WordPress Plugin myLDlinker SQL Injection Vulnerability
SSV-19937 Wordpress Firestats Remote Configuration File Download
SSV-19912 WordPress Simple:Press 4.3插件value参数SQL注入漏洞
SSV-19909 WordPress WP-UserOnline 2.6.2插件脚本注入漏洞
SSV-19862 Vulnerabilities in Cimy Counter for WordPress
SSV-19752 WordPress Gigya Socialize Plugin Cross-Site Scripting Vulnerabilities
SSV-19430 WordPress NextGEN Gallery插件mode参数跨站脚本漏洞
SSV-19332 WordPress <= 2.9.2绕过口令保护漏洞
SSV-19285 WordPress2.9.2跨站漏洞
SSV-87942 WordPress 1.5 index.php 跨站脚本攻击漏洞
SSV-87941 WordPress <2.0.6 Template.php 跨站脚本攻击漏洞
SSV-87940 Wordpress <2.0.6 无效跨站脚本标记跨站脚本漏洞
SSV-87939 WordPress <2.0.6 评论表格SQL注入漏洞
SSV-87938 WordPress <2.0.6 字符集解码SQL注入漏洞
SSV-87943 WordPress 2.0.2-2.0.4 分页参数SQL注入漏洞
SSV-87937 WordPress 1.5.1 Cat_ID参数SQL注入漏洞
SSV-87936 WordPress 1.2 wp-login.php响应拆分攻击漏洞
SSV-87920 WordPress <=2.8.3 wp-admin多个权限绕过漏洞
SSV-87930 WordPress <2.8.2 评论处跨站脚本漏洞
SSV-88145 WordPress <2.2 wp-admin-admin-ajax.php SQL注入漏洞
SSV-18863 0day Wordpress DOS &lt;= 2.9
SSV-87921 WordPress <=2.1 guid 参数SQL注入漏洞
SSV-87932 WordPress FireStats 模块远程文件包含漏洞
SSV-87929 WordPress Paolo Palmonari Photoracer 插件SQL注入漏洞
SSV-87933 WordPress 2.2 functions.php 跨站脚本攻击漏洞
SSV-15131 WordPress WP-Forum插件多个SQL注入漏洞
SSV-18597 WordPress and Pyrmont V2. SQL Injection Vulnerability
SSV-15032 Wordpress Image Manager Plugins Shell Upload Vulnerability
SSV-14989 Vulnerabilities in WP-Cumulus for WordPress
SSV-18330 Vulnerabilities in WP-Cumulus &lt;= 1.20 for WordPress
SSV-12625 WordPress 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution
SSV-12622 WordPress wp-admin/includes/file.php任意文件上传漏洞
SSV-14330 WordPress &lt;= 2.8.5 Unrestricted File Upload Arbitrary PHP Code Execution
SSV-14331 WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass Vulnerability
SSV-14329 WordPress MU 1.2.2 - 1.3.1 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability
SSV-12525 WordPress DM Albums插件任意文件删除漏洞
SSV-12520 WordPress Trackback脚本拒绝服务漏洞
SSV-12506 Joomla JD-WordPress Vulnerability File Inclusion Version 2.0 RC2
SSV-14428 Joomla JD-WordPress 2.0 RC2 remote file icnlusion
SSV-12165 WordPress wp-admin非授权管理访问漏洞
SSV-12147 Wordpress Plugin WP-Syntax &lt;= 0.9.1 Remote Command Execution
SSV-12148 WordPress WP-Syntax插件远程PHP代码执行漏洞
SSV-12059 Wordpress Plugin WP-Syntax &lt;= 0.9.1 Remote Command Execution PoC
SSV-12028 Wordpress &lt;= 2.8.3 Remote Admin Reset Password Vulnerability
SSV-11885 Wordpress 2.8.1 (url) Remote Cross Site Scripting Exploit
SSV-11873 WordPress 'wp-comments-post.php'跨站脚本漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English