Wordpress » Wordpress : Security Vulnerabilities (Gain Information)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2021-39200	200		+Info	2021-09-09	2021-12-14	4.3	None	Remote	Medium	Not required	Partial	None	None
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions output data of the function wp_die() can be leaked under certain conditions, which can include data like nonces. It can then be used to perform actions on your behalf. This has been patched in WordPress 5.8.1, along with any older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to receive the fix.
2	CVE-2021-29450	200		+Info	2021-04-15	2021-04-23	4.0	None	Remote	Low	???	Partial	None	None
Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This requires at least contributor privileges. This has been patched in WordPress 5.7.1, along with the older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to receive the fix.
3	CVE-2019-17671	200		+Info	2019-10-17	2019-11-05	5.0	None	Remote	Low	Not required	Partial	None	None
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
4	CVE-2018-20151	200		+Info	2018-12-14	2019-03-04	5.0	None	Remote	Low	Not required	Partial	None	None
In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler if an unusual configuration were chosen. The search engine could then index and display a user's e-mail address and (rarely) the password that was generated by default.
5	CVE-2017-6514	200		+Info	2019-05-22	2019-05-27	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.
6	CVE-2017-5610	200		Bypass +Info	2017-01-30	2019-03-19	5.0	None	Remote	Low	Not required	Partial	None	None
wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms.
7	CVE-2017-5487	200		+Info	2017-01-15	2017-09-01	5.0	None	Remote	Low	Not required	Partial	None	None
wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.
8	CVE-2016-5835	200		+Info	2016-06-29	2016-11-30	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to wp-admin/includes/ajax-actions.php and wp-admin/revision.php.
9	CVE-2015-5730	200		+Info	2015-11-09	2017-09-21	5.0	None	Remote	Low	Not required	Partial	None	None
The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress before 4.2.4 does not use a constant-time comparison for widgets, which allows remote attackers to conduct a timing side-channel attack by measuring the delay before inequality is calculated.
10	CVE-2013-2203	264		+Info	2013-07-08	2013-09-10	4.3	None	Remote	Medium	Not required	Partial	None	None
WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the absolute path in an XMLHttpRequest error message.
11	CVE-2013-2202	200		+Info	2013-07-08	2013-10-07	4.3	None	Remote	Medium	Not required	Partial	None	None
WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
12	CVE-2012-6635	264		+Info	2014-01-21	2014-02-25	4.0	None	Remote	Low	???	Partial	None	None
wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft.
13	CVE-2012-6634	264		Bypass +Info	2014-01-21	2014-02-25	6.4	None	Remote	Low	Not required	Partial	Partial	None
wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value.
14	CVE-2012-5868	200		+Info	2012-12-27	2013-01-08	2.6	None	Remote	High	Not required	Partial	None	None
WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it easier for remote attackers to discover valid session identifiers via a brute-force attack, or modify data via a replay attack.
15	CVE-2012-3385	264		+Info	2012-07-22	2012-07-23	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors.
16	CVE-2011-4898	200	1	+Info	2012-01-30	2012-01-31	5.0	None	Remote	Low	Not required	None	None	Partial
DISPUTED wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a series of requests with different uname and pwd parameters. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether providing intentionally vague error messages during installation would be reasonable from a usability perspective.
17	CVE-2011-3818	200		+Info	2011-09-24	2012-05-21	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress 2.9.2 and 3.0.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by wp-admin/includes/user.php and certain other files.
18	CVE-2011-3128	200		+Info	2011-08-10	2017-08-29	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.
19	CVE-2011-3126	200		+Info	2011-08-10	2017-08-29	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.
20	CVE-2011-0701	200		+Info	2011-03-14	2017-11-22	4.0	None	Remote	Low	???	Partial	None	None
wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.
21	CVE-2009-2432	264		+Info	2009-07-10	2018-10-10	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message.
22	CVE-2009-2431	20		+Info	2009-07-10	2018-10-10	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source.
23	CVE-2009-2334	287	1	DoS XSS +Info	2009-07-10	2018-10-10	4.9	None	Remote	Medium	???	Partial	Partial	None
wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstrated by the (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service.
24	CVE-2008-0195	200		+Info	2008-01-10	2018-10-15	5.0	None	Remote	Low	Not required	None	Partial	None
WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages.
25	CVE-2008-0191	200		+Info	2008-01-10	2018-10-15	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure.
26	CVE-2007-3639			+Info	2007-07-10	2018-10-15	4.0	None	Remote	High	Not required	Partial	Partial	None
WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via (1) the _wp_http_referer parameter to wp-pass.php, related to the wp_get_referer function in wp-includes/functions.php; and possibly other vectors related to (2) wp-includes/pluggable.php and (3) the wp_nonce_ays function in wp-includes/functions.php.
27	CVE-2007-1599			+Info	2007-03-22	2018-10-16	6.5	None	Remote	Low	???	Partial	Partial	Partial
wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirect_to parameter.
28	CVE-2007-1409			+Info	2007-03-10	2018-10-16	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php, which reveals the path in an error message.
29	CVE-2007-0262			+Info	2007-01-16	2018-10-16	7.8	None	Remote	Low	Not required	Complete	None	None
WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m[] parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as the table prefix.
30	CVE-2007-0109			+Info	2007-01-09	2018-10-16	5.0	None	Remote	Low	Not required	Partial	None	None
wp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks.
31	CVE-2006-4743			+Info	2006-09-13	2018-10-17	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for (1) 404.php, (2) akismet.php, (3) archive.php, (4) archives.php, (5) attachment.php, (6) blogger.php, (7) comments.php, (8) comments-popup.php, (9) dotclear.php, (10) footer.php, (11) functions.php, (12) header.php, (13) hello.php, (14) wp-content/themes/default/index.php, (15) links.php, (16) livejournal.php, (17) mt.php, (18) page.php, (19) rss.php, (20) searchform.php, (21) search.php, (22) sidebar.php, (23) single.php, (24) textpattern.php, (25) upgrade-functions.php, (26) upgrade-schema.php, or (27) wp-db-backup.php, which reveal the path in various error messages. NOTE: another researcher has disputed the details of this report, stating that version 2.0.5 does not exist. NOTE: the admin-footer.php, admin-functions.php, default-filters.php, edit-form-advanced.php, edit-link-form.php, edit-page-form.php, kses.php, locale.php, rss-functions.php, template-loader.php, and wp-db.php vectors are already covered by CVE-2006-0986. The edit-form-comment.php, vars.php, and wp-settings.php vectors are already covered by CVE-2005-4463. The menu-header.php vector is already covered by CVE-2005-2110.
32	CVE-2006-3389			+Info	2006-07-06	2018-10-18	5.0	None	Remote	Low	Not required	Partial	None	None
index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message. NOTE: this issue has been disputed by a third party who states that the issue does not leak any target-specific information.
33	CVE-2006-0986			+Info	2006-03-03	2018-10-18	5.0	None	Remote	Low	Not required	None	Partial	None
WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default-filters.php, (2) template-loader.php, (3) rss-functions.php, (4) locale.php, (5) wp-db.php, and (6) kses.php in the wp-includes/ directory; and (7) edit-form-advanced.php, (8) admin-functions.php, (9) edit-link-form.php, (10) edit-page-form.php, (11) admin-footer.php, and (12) menu.php in the wp-admin directory; and possibly (13) list directory contents of the wp-includes directory. NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment.php vectors are already covered by CVE-2005-4463. The menu-header.php vector is already covered by CVE-2005-2110. Other vectors might be covered by CVE-2005-1688. NOTE: if the typical installation of WordPress does not list any site-specific files to wp-includes, then vector [13] is not an exposure.
34	CVE-2005-4463			+Info	2005-12-21	2018-10-19	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to (1) wp-includes/vars.php, (2) wp-content/plugins/hello.php, (3) wp-admin/upgrade-functions.php, (4) wp-admin/edit-form.php, (5) wp-settings.php, and (6) wp-admin/edit-form-comment.php, which leaks the path in an error message related to undefined functions or failed includes. NOTE: the wp-admin/menu-header.php vector is already covered by CVE-2005-2110. NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment.php vectors were also reported to affect WordPress 2.0.1.
35	CVE-2005-2110			+Info	2005-07-05	2018-10-19	5.0	None	Remote	Low	Not required	Partial	None	None
WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via (1) a direct request to menu-header.php or a "1" value in the feed parameter to (2) wp-atom.php, (3) wp-rss.php, or (4) wp-rss2.php, which reveal the path in an error message. NOTE: vector [1] was later reported to also affect WordPress 2.0.1.
36	CVE-2005-1688			+Info	2005-05-20	2016-10-18	5.0	None	Remote	Low	Not required	Partial	None	None
Wordpress 1.5 and earlier allows remote attackers to obtain sensitive information via a direct request to files in (1) wp-content/themes/, (2) wp-includes/, or (3) wp-admin/, which reveal the path in an error message.

Total number of vulnerabilities : 36 Page : 1 (This Page)