Database

WordPress Vulnerability Database (page 1375)

Every known WordPress plugin, theme and core vulnerability with CVSS, affected and patched versions, CISA KEV status and public PoC signals.

WordPress Vulnerability Database (page 1375)
Severity	Vulnerability	CVE	Installs	Published
Medium5.3	IP Address Spoofing WordPress≤2.0.2Update to 2.0.3	CVE-2006-2702	—	Jun 1, 2006
Medium6.1	Cross-Site Scripting WordPress<2.0.2Update to 2.0.2	CVE-2007-5105	—	Mar 10, 2006
High7.5	Sensitive Information Disclosure WordPress≤2.0.1Update to 2.0.2	CVE-2006-0986	—	Mar 10, 2006
High7.2	Cross-Site Scripting WordPress≤2.0.1Update to 2.0.2	CVE-2006-0985	—	Mar 10, 2006
Medium6.1	Reflected Cross-Site Scripting WordPress<2.0.2Update to 2.0.2	CVE-2006-1263	—	Mar 10, 2006
Medium6.1	Cross-Site Scripting WordPress≤2.0Update to 2.0.1	CVE-2006-1796	—	Jan 31, 2006
High7.2	SQL Injection WordPress≤1.5.2Update to 2.0	CVE-2006-1012	—	Dec 31, 2005
Medium5.3	Directory Traversal secure-files≤1.1Update to 1.2	CVE-2005-10002	—	Oct 3, 2005
High8.8	Remote Code Execution WordPress≤1.5.1.3Update to 1.5.2	CVE-2005-2612	—	Aug 9, 2005
High7.3	Sensitive Information Disclosure WordPress≤1.5.1.2Update to 1.5.1.3	CVE-2005-2110	—	Jun 29, 2005
Medium5.3	Arbitrary Email Content Change WordPress≤1.5.1.2Update to 1.5.1.3	CVE-2005-2109	—	Jun 29, 2005
High7.2	Cross-Site Scripting WordPress≤1.5.1.2Update to 1.5.1.3	CVE-2005-2107	—	Jun 29, 2005
High8.8	SQL Injection WordPress<1.5.1.3Update to 1.5.1.3	CVE-2005-2108	—	Jun 29, 2005
Medium6.4	Stored Cross-Site Scripting WordPress≤1.5.1Update to 1.5.1.2	CVE-2005-1102	—	Jun 27, 2005
High8.8	SQL Injection WordPress≤1.5.1.1Update to 1.5.1.2	CVE-2005-1810	—	May 27, 2005
Medium5.3	Full Path Disclosure WordPress<1.5.1Update to 1.5.1	CVE-2005-1688	—	May 9, 2005
High8.8	SQL Injection WordPress<1.5.1Update to 1.5.1	CVE-2005-1687	—	May 9, 2005
Medium5.3	HTTP Response Splitting WordPress<1.2.1Update to 1.2.1	CVE-2004-1584	—	Oct 6, 2004
Medium6.1	Cross-Site Scripting WordPress<1.2Update to 1.2	CVE-2004-1559	—	Oct 6, 2004
High8.8	SQL Injection WordPress<0.72Update to 0.72	CVE-2003-1598	—	Oct 11, 2003
Critical9.8	Remote File Inclusion WordPress≤0.70Update to 0.71	CVE-2003-1599	—	Jun 9, 2003

Medium5.3
IP Address Spoofing
WordPress
≤2.0.2Update to 2.0.3
CVE-2006-2702Jun 1, 2006
Medium6.1
Cross-Site Scripting
WordPress
<2.0.2Update to 2.0.2
CVE-2007-5105Mar 10, 2006
High7.5
Sensitive Information Disclosure
WordPress
≤2.0.1Update to 2.0.2
CVE-2006-0986Mar 10, 2006
High7.2
Cross-Site Scripting
WordPress
≤2.0.1Update to 2.0.2
CVE-2006-0985Mar 10, 2006
Medium6.1
Reflected Cross-Site Scripting
WordPress
<2.0.2Update to 2.0.2
CVE-2006-1263Mar 10, 2006
Medium6.1
Cross-Site Scripting
WordPress
≤2.0Update to 2.0.1
CVE-2006-1796Jan 31, 2006
High7.2
SQL Injection
WordPress
≤1.5.2Update to 2.0
CVE-2006-1012Dec 31, 2005
Medium5.3
Directory Traversal
secure-files
≤1.1Update to 1.2
CVE-2005-10002Oct 3, 2005
High8.8
Remote Code Execution
WordPress
≤1.5.1.3Update to 1.5.2
CVE-2005-2612Aug 9, 2005
High7.3
Sensitive Information Disclosure
WordPress
≤1.5.1.2Update to 1.5.1.3
CVE-2005-2110Jun 29, 2005
Medium5.3
Arbitrary Email Content Change
WordPress
≤1.5.1.2Update to 1.5.1.3
CVE-2005-2109Jun 29, 2005
High7.2
Cross-Site Scripting
WordPress
≤1.5.1.2Update to 1.5.1.3
CVE-2005-2107Jun 29, 2005
High8.8
SQL Injection
WordPress
<1.5.1.3Update to 1.5.1.3
CVE-2005-2108Jun 29, 2005
Medium6.4
Stored Cross-Site Scripting
WordPress
≤1.5.1Update to 1.5.1.2
CVE-2005-1102Jun 27, 2005
High8.8
SQL Injection
WordPress
≤1.5.1.1Update to 1.5.1.2
CVE-2005-1810May 27, 2005
Medium5.3
Full Path Disclosure
WordPress
<1.5.1Update to 1.5.1
CVE-2005-1688May 9, 2005
High8.8
SQL Injection
WordPress
<1.5.1Update to 1.5.1
CVE-2005-1687May 9, 2005
Medium5.3
HTTP Response Splitting
WordPress
<1.2.1Update to 1.2.1
CVE-2004-1584Oct 6, 2004
Medium6.1
Cross-Site Scripting
WordPress
<1.2Update to 1.2
CVE-2004-1559Oct 6, 2004
High8.8
SQL Injection
WordPress
<0.72Update to 0.72
CVE-2003-1598Oct 11, 2003
Critical9.8
Remote File Inclusion
WordPress
≤0.70Update to 0.71
CVE-2003-1599Jun 9, 2003