'

漏洞组件 — WordPress

漏洞详情：
WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL 数据库的服务器上架设自己的网志。也可以把 WordPress 当作一个内容管理系统（CMS）来使用。WordPress 是一个免费的开源项目，在GNU通用公共许可证下授权发布。 WordPress 被认为是Michel Valdrighi所开发的网志平台b2 cafelog的正式继承者。“WordPress”这个名字出自 Christine Selleck 的主意，他是主要开发者Matt Mullenweg的朋友。

相关漏洞

SSV ID 漏洞名称
SSV-11860 WordPress Comment Author URI跨站脚本漏洞
SSV-11858 WordPress < 2.8.1 Security Bypass 0day
SSV-11824 wordpress 281评论显示xss漏洞
SSV-14833 WordPress Plugin My Category Order <= 2.8 SQL Injection Vulnerability
SSV-11788 WordPress wp-admin/admin.php模块错误权限检查漏洞
SSV-14855 WordPress Privileges Unchecked in admin.php and Multiple Information
SSV-11787 WordPress口令重置用户名枚举漏洞
SSV-11777 WordPress Privileges Unchecked in admin.php and Multiple Information Disclosures
SSV-11737 WordPress Plugin DM Albums 1.9.2 Remote File Disclosure Vulnerability
SSV-11739 WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability
SSV-11726 WordPress Plugin DM Albums 1.9.2 Remote File Inclusion Vuln
SSV-11655 WordPress Photoracer插件id参数SQL注入漏洞
SSV-11639 WordPress Plugin Photoracer 1.0 (id) SQL Injection Vulnerability
SSV-11617 WordPress Plugin FireStats <= 1.6.1(fs_javascript) RFI Vulnerability
SSV-11440 Wordpress Plugin Lytebox (wp-lytebox) Local File Inclusion Vulnerability
SSV-4902 WordPress MU wp-includes/wpmu-functions.php模块跨站脚本漏洞
SSV-10804 Wordpress MU < 2.7 'HOST' HTTP Header XSS Vulnerability
SSV-10459 Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability
SSV-4656 Wordpress 2.7.0 admin remote code execution vulnerability
SSV-10310 Wordpress Plugin Page Flip Image Gallery <= 0.2.2 Remote FD Vuln
SSV-4498 WordPress wp-includes/feed.php模块跨站脚本漏洞
SSV-9841 Wordpress Plugin e-Commerce <= 3.4 Arbitrary File Upload Exploit
SSV-9810 WordPress Media Holder (mediaHolder.php id) SQL Injection vulnerability
SSV-17436 WordPress Media Holder (mediaHolder.php id) SQL Injection Vuln
SSV-9751 Wordpress Plugin st_newsletter (stnl_iframe.php) SQL Injection Vulnerability
SSV-17431 Wordpress Plugin st_newsletter (stnl_iframe.php) SQL Injection Vuln
SSV-4037 WordPress随机密码生成不充分漏洞
SSV-9467 Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit
SSV-4005 WordPress丢失密码SQL栏截断未授权漏洞
SSV-9436 Wordpress 2.6.1 SQL Column Truncation Vulnerability
SSV-3722 WordPress Wp Downloads Manager 'upload.php'任意文件上传漏洞
SSV-9172 Wordpress Plugin Download Manager 0.2 Arbitrary File Upload Exploit
SSV-3671 WordPress 'press-this.php'多个跨站脚本漏洞
SSV-3562 Wordpress XML-RPC接口非授权操作漏洞
SSV-3331 WordPress Upload File插件wp-uploadfile.php SQL注入漏洞
SSV-3308 WordPress Write标签任意文件上传漏洞
SSV-3243 WordPress下载监控插件id参数SQL注入漏洞
SSV-3227 WordPress wpSS插件ss_id参数SQL注入漏洞
SSV-3229 WordPress Cookie完整性保护非授权访问漏洞
SSV-3228 WordPress cat参数目录遍历漏洞
SSV-8365 Wordpress Plugin Spreadsheet <= 0.6 SQL Injection Vulnerability
SSV-3119 WordPress wp-download插件dl_id参数SQL注入漏洞
SSV-8229 Wordpress Plugin Download (dl_id) SQL Injection Vulnerability
SSV-2969 WordPress Sniplets插件多个输入验证漏洞
SSV-8175 Wordpress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities
SSV-8116 Wordpress Photo album Remote SQL Injection Vulnerability
SSV-8114 Wordpress Plugin Simple Forum 1.10-1.11 SQL Injection Vulnerability
SSV-8111 Wordpress Plugin Simple Forum 2.0-2.1 SQL Injection Vulnerability
SSV-17146 Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
SSV-8063 Wordpress Plugin st_newsletter Remote SQL Injection Vulnerability
SSV-8044 Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities
SSV-8042 Wordpress Plugin Wordspew Remote SQL Injection Vulnerability
SSV-2884 WordPress WassUp插件spy.php脚本远程SQL注入漏洞
SSV-8028 Wordpress Plugin WassUp 1.4.3 (spy.php to_date) SQL Injection Exploit
SSV-8024 Wordpress Plugin Adserve 0.2 adclick.php SQL Injection Exploit
SSV-7928 Wordpress plugin fGallery 2.4.1 fimrss.php SQL Injection Vulnerability
SSV-7927 Wordpress Plugin WP-Cal 0.3 editevent.php SQL Injection Vulnerability
SSV-7886 Wordpress plugin WP-Forum 1.7.4 Remote SQL Injection Vulnerability
SSV-2792 WordPress Plugin Wp-FileManager 'ajaxfilemanager.php'任意文件上传漏洞
SSV-7796 Wordpress Plugin Wp-FileManager 1.2 Remote Upload Vulnerability
SSV-2775 WordPress Multiple Cross-Site Scripting Vulnerabilities
SSV-2773 WordPress wp-db.php Character Set SQL Injection Vulnerability
SSV-2684 WordPress错误paged参数SQL操作信息泄露漏洞
SSV-7640 WordPress <= 2.0.2 (cache) Remote Shell Injection Exploit
SSV-2640 WordPress $_SERVER变量跨站脚本漏洞
SSV-2628 WordPress未授权帖子访问漏洞
SSV-2580 WordPress wp-db.php文件字符集SQL注入漏洞
SSV-7592 Wordpress <= 2.3.1 Charset Remote SQL Injection Vulnerability
SSV-7568 Wordpress Plugin PictPress <= 0.91 Remote File Disclosure Vulnerability
SSV-2388 BackUpWordPress Bkpwp_Plugin_Path远程文件包含漏洞
SSV-7442 WordPress Plugin BackUpWordPress <= 0.4.2b RFI Vulnerability
SSV-7397 Simple Forum (for WordPress) sql-inject exploit (public version)
SSV-7275 Wordpress Multiple Versions Pwnpress Exploitation Tookit (0.2pub)
SSV-7262 Wordpress Multiple Versions Pwnpress Exploitation Tookit
SSV-2218 WordPress Unfiltered_HTML字段名称HTML注入漏洞
SSV-7163 WordPress MultiUser crossite scripting PoC
SSV-2079 WordPress WP-FeedStats HTML注入漏洞
SSV-2091 Wordpress多个输入验证漏洞
SSV-2068 WordPress多个远程安全漏洞
SSV-1927 WordPress Custom字段任意文件上传漏洞
SSV-6983 WordPress 2.2 (wp-app.php) Arbitrary File Upload Exploit
SSV-1899 WordPress自动统计模块Referer字段HTML注入漏洞
SSV-1848 Wordpress XMLRPC.PHP SQL注入漏洞
SSV-6911 Wordpress 2.2 (xmlrpc.php) Remote SQL Injection Exploit
SSV-6843 Wordpress 2.1.3 admin-ajax.php SQL Injection Blind Fishing Exploit
SSV-1786 Wordpress admin-ajax.php远程SQL注入漏洞
SSV-1765 WordPress Akismet插件未明漏洞
SSV-1742 WordPress多个插件远程文件包含漏洞
SSV-6733 Wordpress plugin myflash <= 1.00 (wppath) RFI Vulnerability
SSV-6730 Wordpress plugin wp-Table <= 1.43 (inc_dir) RFI Vulnerability
SSV-6731 Wordpress plugin wordTube <= 1.43 (wpPATH) RFI Vulnerability
SSV-6718 Wordpress Plugin myGallery <= 1.4b4 Remote File Inclusion Vulnerability
SSV-6576 Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
SSV-1549 Wordpress物理路径暴露漏洞
SSV-1522 Wordpress PHP_Self跨站脚本漏洞
SSV-6376 WordPress AdminPanel CSRF/XSS - 0day
SSV-1453 Wordpress 2.1.1远程命令执行后门漏洞
SSV-1312 Wordpress Pingback SourceURI拒绝服务和信息泄露漏洞
SSV-5984 Wordpress <= 2.0.6 wp-trackback.php Remote SQL Injection Exploit
SSV-1148 WordPress Charset解码SQL注入漏洞
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English