Wordpress
Wordpress MU: vulnerabilidades y CVE
Wordpress MU tiene 10 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2009-2432 | Media (5) | 3.1% | — | 10 jul 2009 | WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message. |
| CVE-2009-2336 | Media (5) | 5.4% | — | 10 jul 2009 | The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid… |
| CVE-2009-2335 | Media (5) | 85% | — | 10 jul 2009 | WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor… |
| CVE-2009-2334 | Media (4.9) | 6.3% | — | 10 jul 2009 | wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the… |
| CVE-2009-1030 | Media (4.3) | 4.7% | — | 20 mar 2009 | Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2008-5695 | Alta (8.5) | 12% | — | 19 dic 2008 | wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manage_options and upload_files… |
| CVE-2008-4671 | Media (4.3) | 3.8% | — | 22 oct 2008 | Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters. |
| CVE-2007-4544 | Media (4.3) | 0.89% | — | 27 ago 2007 | Cross-site scripting (XSS) vulnerability in wp-newblog.php in WordPress multi-user (MU) 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the weblog_id parameter (Username field). |
| CVE-2007-3544 | Media (6.5) | 1.8% | — | 3 jul 2007 | Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code via unspecified vectors,… |
| CVE-2007-3543 | Media (6) | 1.6% | — | 3 jul 2007 | Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making a post that specifies a .php filename… |
Otros productos de Wordpress
Wordpress · 367Sniplets Plugin · 3Math Comment Spam Protection Plugin · 2Wassup Plugin · 2Pay-with-tweet · 2Blix · 2Gutenberg · 2Captcha · 1Drag Drop Builder Human Face Detector PRE Built Templates Spam Protection User Email Notifications More · 1Blogger Importer · 1Download Monitor Plugin · 1Debug BAR · 1