Vendor Dictionary: WordPress

WordPress

Short Name:	[None Entered]
Previous Names:	[None Entered]
URL:	http://wordpress.org [visit link]
Email:	[None Entered]
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	[None Entered]
Notes:	[No Notes]
Full Details...

Vulnerabilities by Vendor Product

WordPress

« Previous 1 2 Next »

WordPress

Accept Signups Plugin for WordPress: 0.1; OSVDB ID: 70101 Accept Signups Plugin for WordPress wp-content/plugins/accept-signups/accept-signups_submit.php email Parameter XSS

: 1.5.1

Recip.ly Plugin for WordPress: 1.1.7; OSVDB ID: 70664 Recip.ly Plugin for WordPress wp-content/plugins/reciply/uploadImage.php Arbitrary File Upload

Anti-Spam Plugin: 2.0; OSVDB ID: 58126 Anti-Spam Spinoff Plugin for WordPress Audio Clip Concatenation Weakness CAPTCHA Bypass

Comment Rating Plugin for WordPress: 2.9.20; OSVDB ID: 69642 Comment Rating Plugin for WordPress Multiple Admin Function CSRF

FeedList Plugin for WordPress: 2.61.01; OSVDB ID: 69071 FeedList Plugin for WordPress wp-content/plugins/feedlist/handler_image.php i Parameter XSS

DB Toolkit Plugin for WordPress: 0.1.10; OSVDB ID: 69076 DB Toolkit Plugin for WordPress wp-content/plugins/db-toolkit/data_form/fieldtypes/file/scripts/uploadify.php Arbitrary File Upload; 0.1.7; OSVDB ID: 69076 DB Toolkit Plugin for WordPress wp-content/plugins/db-toolkit/data_form/fieldtypes/file/scripts/uploadify.php Arbitrary File Upload

jRSS Widget Plugin for WordPress: 1.1.1; OSVDB ID: 69073 jRSS Widget Plugin for WordPress proxy.php url Parameter Traversal Arbitrary File Access

1.5.0: 1.5.0

Event Registration Plugin: 5.32; OSVDB ID: 69242 WordPress Event Registration Plugin Events Page event_id Parameter SQL Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.