CVE-2013-0236

Published: Jul 8, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post.

Affected (76)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

76 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Up to 3.5.0
Wordpress Wordpress	Version 0.71
Wordpress Wordpress	Version 1.0.1
Wordpress Wordpress	Version 1.0.2
Wordpress Wordpress	Version 1.0
Wordpress Wordpress	Version 1.1.1
Wordpress Wordpress	Version 1.2.1
Wordpress Wordpress	Version 1.2.2
Wordpress Wordpress	Version 1.2.3
Wordpress Wordpress	Version 1.2.4
Wordpress Wordpress	Version 1.2.5
Wordpress Wordpress	Version 1.2.5 a
Wordpress Wordpress	Version 1.2
Wordpress Wordpress	Version 1.3.2
Wordpress Wordpress	Version 1.3.3
Wordpress Wordpress	Version 1.3
Wordpress Wordpress	Version 1.5.1.1
Wordpress Wordpress	Version 1.5.1.2
Wordpress Wordpress	Version 1.5.1.3
Wordpress Wordpress	Version 1.5.1
Wordpress Wordpress	Version 1.5.2
Wordpress Wordpress	Version 1.5
Wordpress Wordpress	Version 1.6.2
Wordpress Wordpress	Version 2.0.10
Wordpress Wordpress	Version 2.0.11
Wordpress Wordpress	Version 2.0.1
Wordpress Wordpress	Version 2.0.2
Wordpress Wordpress	Version 2.0.4
Wordpress Wordpress	Version 2.0.5
Wordpress Wordpress	Version 2.0.6
Wordpress Wordpress	Version 2.0.7
Wordpress Wordpress	Version 2.0.8
Wordpress Wordpress	Version 2.0.9
Wordpress Wordpress	Version 2.0
Wordpress Wordpress	Version 2.1.1
Wordpress Wordpress	Version 2.1.2
Wordpress Wordpress	Version 2.1.3
Wordpress Wordpress	Version 2.1
Wordpress Wordpress	Version 2.2.1
Wordpress Wordpress	Version 2.2.2
Wordpress Wordpress	Version 2.2.3
Wordpress Wordpress	Version 2.2
Wordpress Wordpress	Version 2.3.1
Wordpress Wordpress	Version 2.3.2
Wordpress Wordpress	Version 2.3.3
Wordpress Wordpress	Version 2.3
Wordpress Wordpress	Version 2.5.1
Wordpress Wordpress	Version 2.5
Wordpress Wordpress	Version 2.6.1
Wordpress Wordpress	Version 2.6.2
Wordpress Wordpress	Version 2.6.3
Wordpress Wordpress	Version 2.6.5
Wordpress Wordpress	Version 2.6
Wordpress Wordpress	Version 2.7.1
Wordpress Wordpress	Version 2.7
Wordpress Wordpress	Version 2.8.1
Wordpress Wordpress	Version 2.8.2
Wordpress Wordpress	Version 2.8.3
Wordpress Wordpress	Version 2.8.4
Wordpress Wordpress	Version 2.8.4 a
Wordpress Wordpress	Version 2.8.5.1
Wordpress Wordpress	Version 2.8.5.2
Wordpress Wordpress	Version 2.8.5
Wordpress Wordpress	Version 2.8.6
Wordpress Wordpress	Version 2.8
Wordpress Wordpress	Version 2.9.1.1
Wordpress Wordpress	Version 2.9.1
Wordpress Wordpress	Version 2.9.2
Wordpress Wordpress	Version 2.9
Wordpress Wordpress	Version 3.3.1
Wordpress Wordpress	Version 3.3.2
Wordpress Wordpress	Version 3.3.3
Wordpress Wordpress	Version 3.3
Wordpress Wordpress	Version 3.4.0
Wordpress Wordpress	Version 3.4.1
Wordpress Wordpress	Version 3.4.2