← Back

Wordpress

wordpress

409 CVEs • 51 products

Products (51)

Click to collapse
Toggle
Wordpress
wordpress
355 CVEs
Wordpress Mu
wordpress_mu
10 CVEs
Sniplets Plugin
sniplets_plugin
3 CVEs
Blix
blix
2 CVEs
Math Comment Spam Protection Plugin
math_comment_spam_protection_plugin
2 CVEs
Wassup Plugin
wassup_plugin
2 CVEs
Pay With Tweet
pay-with-tweet
2 CVEs
Blixed
blixed
1 CVE
Blixkrieg
blixkrieg
1 CVE
Unamed Theme
unamed_theme
1 CVE
Unamed Theme Se
unamed_theme_se
1 CVE
Sirius
sirius
1 CVE
Pool
pool
1 CVE
Wordpressclassic
wordpressclassic
1 CVE
Pictpress
pictpress
1 CVE
Wp Contactform
wp-contactform
1 CVE
Cryptographp
cryptographp
1 CVE
Captcha
captcha
1 CVE
Filemanager
filemanager
1 CVE
Wp Forum
wp_forum
1 CVE
Wp Cal Plugin
wp_cal_plugin
1 CVE
Adserve
adserve
1 CVE
Permalinks Migration Plugin
permalinks_migration_plugin
1 CVE
Wordspew
wordspew
1 CVE
St Newsletter Plugin
st_newsletter_plugin
1 CVE
Wp Footnotes
wp-footnotes
1 CVE
Search Unleashed Plugin
search_unleashed_plugin
1 CVE
Dean Logan Wp People Plugin
dean_logan_wp-people_plugin
1 CVE
Photo Album Plugin
photo_album_plugin
1 CVE
Wp Download
wp_download
1 CVE
Wpss
wpss
1 CVE
Download Monitor Plugin
download_monitor_plugin
1 CVE
Upload File Plugin
upload_file_plugin
1 CVE
Wp Downloads Manager
wp_downloads_manager
1 CVE
Spambam Plugin
spambam_plugin
1 CVE
Page Flip Image Gallery Plugin
page_flip_image_gallery_plugin
1 CVE
Peter's Math Anti Spam For Wordpress
peter's_math_anti-spam_for_wordpress
1 CVE
Wordpress Users
wordpress-users
1 CVE
Fcchat Widget
fcchat_widget
1 CVE
Plugin Newsletter Plugin
plugin_newsletter_plugin
1 CVE
Alert Before You Post
alert_before_you_post
1 CVE
Lanoba Social Plugin
lanoba_social_plugin
1 CVE
Slideshow Gallery2
slideshow_gallery2
1 CVE
Wp Maintenance Mode Plugin
wp_maintenance_mode_plugin
1 CVE
Requests
requests
1 CVE
Debug Bar
debug_bar
1 CVE
Health Check & Troubleshooting
health_check_&_troubleshooting
1 CVE
Performance Lab
performance_lab
1 CVE
Blogger Importer
blogger_importer
1 CVE
Gutenberg
gutenberg
1 CVE
Thanh Toan Quet Ma Qr Code Tu Dong
thanh_toan_quet_ma_qr_code_tu_dong
1 CVE

CVEs (409)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-2109
1Wordpress
1Wordpress
Apr 16, 2026
Jul 5, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.
CVE-2005-2108
1Wordpress
1Wordpress
Apr 16, 2026
Jul 5, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the...Show more
SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via input that is not filtered in the HTTP_RAW_POST_DATA variable, which stores the data in an XML file.Show less
CVE-2005-2107
1Wordpress
1Wordpress
Apr 16, 2026
Jul 5, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter.
CVE-2005-1810
1Wordpress
1Wordpress
Apr 16, 2026
Jun 1, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.
CVE-2005-1688
1Wordpress
1Wordpress
Apr 16, 2026
May 20, 2005
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.
CVE-2005-1687
1Wordpress
1Wordpress
Apr 16, 2026
May 20, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter.
CVE-2005-1102
1Wordpress
1Wordpress
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.
CVE-2004-1584
1Wordpress
1Wordpress
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.
CVE-2004-1559
1Wordpress
1Wordpress
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) re...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirect_url parameter to admin-header.php, (3) popuptitle, popupurl, content, or post_title parameters to bookmarklet.php, (4) cat_ID parameter to categories.php, (5) s parameter to edit.php, or (6) s or mode parameter to edit-comments.php.Show less