WordPress Archives - Standoutmedia A/S

Remote Code Execution via malicious file upload in WP_Image_Editor_Imagick

Skrevet den 14. august 2026 af i WordPress

An attacker holding the upload_files capability (Author role or higher) can upload a file that Imagick delegates to Ghostscript for PostScript/PDF rasterization. WP_Image_Editor_Imagick::load() decided how to treat an uploaded file purely from its filename extension, so a file with an image-looking extension – or one carrying an Imagick FORMAT: prefix – could still be parsed as PostScript, reach Ghostscript, and execute code on any server where both Imagick and Ghostscript are installed.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.7.34
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.8.29
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 4.9.30
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0.24
WordPress 5.0.25
WordPress 5.0.26
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.21
WordPress 5.1.22
WordPress 5.1.23
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.21
WordPress 5.2.22
WordPress 5.2.23
WordPress 5.2.24
WordPress 5.2.25
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.18
WordPress 5.3.19
WordPress 5.3.2
WordPress 5.3.20
WordPress 5.3.21
WordPress 5.3.22
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.16
WordPress 5.4.17
WordPress 5.4.18
WordPress 5.4.19
WordPress 5.4.2
WordPress 5.4.20
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.15
WordPress 5.5.16
WordPress 5.5.17
WordPress 5.5.18
WordPress 5.5.19
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.14
WordPress 5.6.15
WordPress 5.6.16
WordPress 5.6.17
WordPress 5.6.18
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.12
WordPress 5.7.13
WordPress 5.7.14
WordPress 5.7.15
WordPress 5.7.16
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.12
WordPress 5.8.13
WordPress 5.8.14
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.12
WordPress 5.9.13
WordPress 5.9.14
WordPress 5.9.15
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.11
WordPress 6.0.12
WordPress 6.0.13
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.10
WordPress 6.1.11
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.1.9
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.10
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.2.8
WordPress 6.2.9
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.3.7
WordPress 6.3.8
WordPress 6.3.9
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.4.7
WordPress 6.4.8
WordPress 6.4.9
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.5.7
WordPress 6.5.8
WordPress 6.5.9
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.6.4
WordPress 6.6.5
WordPress 6.6.6
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.7.4
WordPress 6.7.5
WordPress 6.7.6
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.8.6
WordPress 6.8.7
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 6.9.6
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2
WordPress 7.0.3

Contributor+ stored XSS in the Post Date block

Skrevet den 12. august 2026 af i WordPress

Render_block_core_post_date() interpolated the raw and formatted post date directly into a element and, when the block is configured as a link, the permalink into an . The href moreover used the malformed %1s / %2s placeholders instead of %1$s / %2$s, so the substitution did not behave as intended. The fix escapes each value at the point of output — esc_attr() on the datetime attribute, esc_html() on the visible date, esc_url() on the permalink — and corrects the sprintf() placeholders.

This vulnerability affects the following application versions:

WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.12
WordPress 5.8.13
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.12
WordPress 5.9.13
WordPress 5.9.14
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.0.10
WordPress 6.0.11
WordPress 6.0.12
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.1.9
WordPress 6.1.10
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.2.8
WordPress 6.2.9
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.3.7
WordPress 6.3.8
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.4.7
WordPress 6.4.8
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.5.7
WordPress 6.5.8
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.6.4
WordPress 6.6.5
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.7.4
WordPress 6.7.5
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.8.6
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

CSS Injection in WordPress Safe CSS Attribute Filter

Skrevet den 12. august 2026 af i WordPress

WordPress’ safe CSS attribute filter (safecss_filter_attr()) fails open: when the recursive preg_replace() used to strip url()/var()/calc() from a test copy of a declaration hits a PCRE backtracking or recursion limit it returns null, and the follow-up preg_match() returns false, which the code read as ‘no dangerous characters found’. A crafted style declaration is therefore allowed precisely when the filter could not analyse it. An authenticated user with Author-level access or higher can inject arbitrary CSS into published content, enabling defacement, UI redressing and CSS-based data exfiltration.

This vulnerability affects the following application versions:

WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0.24
WordPress 5.0.25
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.21
WordPress 5.1.22
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.21
WordPress 5.2.22
WordPress 5.2.23
WordPress 5.2.24
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.18
WordPress 5.3.19
WordPress 5.3.2
WordPress 5.3.20
WordPress 5.3.21
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.16
WordPress 5.4.17
WordPress 5.4.18
WordPress 5.4.19
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.15
WordPress 5.5.16
WordPress 5.5.17
WordPress 5.5.18
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.14
WordPress 5.6.15
WordPress 5.6.16
WordPress 5.6.17
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.12
WordPress 5.7.13
WordPress 5.7.14
WordPress 5.7.15
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.12
WordPress 5.8.13
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.12
WordPress 5.9.13
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.11
WordPress 6.0.12
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.10
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.1.9
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.2.8
WordPress 6.2.9
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.3.7
WordPress 6.3.8
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.4.7
WordPress 6.4.8
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.5.7
WordPress 6.5.8
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.6.4
WordPress 6.6.5
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.7.4
WordPress 6.7.5
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.8.6
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

Disclosure of private notes in comment feeds

Skrevet den 12. august 202613. august 2026 af i WordPress

Comment feeds selected every approved row from the comments table without filtering on comment type, so internal notes (comment_type of note), which are not intended to be publicly visible, were published in the archive, search, front-page and single-post comment feeds. The fix adds AND {$wpdb->comments}.comment_type != ‘note’ to all three $cwhere clauses in WP_Query::get_posts() and WP_Query::the_comments().

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.7.34
WordPress 4.7.35
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.8.29
WordPress 4.8.30
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 4.9.30
WordPress 4.9.31
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0.24
WordPress 5.0.25
WordPress 5.0.26
WordPress 5.0.27
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.21
WordPress 5.1.22
WordPress 5.1.23
WordPress 5.1.24
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.21
WordPress 5.2.22
WordPress 5.2.23
WordPress 5.2.24
WordPress 5.2.25
WordPress 5.2.26
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.18
WordPress 5.3.19
WordPress 5.3.2
WordPress 5.3.20
WordPress 5.3.21
WordPress 5.3.22
WordPress 5.3.23
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.16
WordPress 5.4.17
WordPress 5.4.18
WordPress 5.4.19
WordPress 5.4.2
WordPress 5.4.20
WordPress 5.4.21
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.15
WordPress 5.5.16
WordPress 5.5.17
WordPress 5.5.18
WordPress 5.5.19
WordPress 5.5.2
WordPress 5.5.20
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.14
WordPress 5.6.15
WordPress 5.6.16
WordPress 5.6.17
WordPress 5.6.18
WordPress 5.6.19
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.12
WordPress 5.7.13
WordPress 5.7.14
WordPress 5.7.15
WordPress 5.7.16
WordPress 5.7.17
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.12
WordPress 5.8.13
WordPress 5.8.14
WordPress 5.8.15
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.12
WordPress 5.9.13
WordPress 5.9.14
WordPress 5.9.15
WordPress 5.9.16
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.11
WordPress 6.0.12
WordPress 6.0.13
WordPress 6.0.14
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.10
WordPress 6.1.11
WordPress 6.1.12
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.1.9
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.10
WordPress 6.2.11
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.2.8
WordPress 6.2.9
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.10
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.3.7
WordPress 6.3.8
WordPress 6.3.9
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.10
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.4.7
WordPress 6.4.8
WordPress 6.4.9
WordPress 6.5
WordPress 6.5.10
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.5.7
WordPress 6.5.8
WordPress 6.5.9
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.6.4
WordPress 6.6.5
WordPress 6.6.6
WordPress 6.6.7
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.7.4
WordPress 6.7.5
WordPress 6.7.6
WordPress 6.7.7
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.8.6
WordPress 6.8.7
WordPress 6.8.8
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

Information disclosure in the Latest Comments block comments on password-protected posts

Skrevet den 12. august 2026 af i WordPress

With displayExcerpt set to full content, render_block_core_latest_comments() rendered get_comment_text() for every recent comment regardless of the parent post’s protection state, so any unauthenticated visitor could read the discussion on a password-protected post from the block output. The fix checks post_password_required( $comment->comment_post_ID ) and substitutes the “Password protected” placeholder instead of the comment body. (The excerpt branch already went through get_comment_excerpt(), which performs its own check.)

This vulnerability affects the following application versions:

WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

Post slug enumeration via the 404 canonical redirect guesser

Skrevet den 12. august 2026 af i WordPress

In redirect_guess_404_permalink(), the query-var branch that handles an array of post types built its post_type IN (…) clause from the raw get_query_var( ‘post_type’ ) value rather than from $post_types, the list already filtered down to publicly viewable types a few lines above. An unauthenticated visitor could therefore supply non-public post types in the request and have the redirect guesser confirm or deny the existence of their slugs. The fix passes the filtered $post_types array to esc_sql() so the clause matches the authorisation check that precedes it.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0.24
WordPress 5.0.25
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.21
WordPress 5.1.22
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.21
WordPress 5.2.22
WordPress 5.2.23
WordPress 5.2.24
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.18
WordPress 5.3.19
WordPress 5.3.2
WordPress 5.3.20
WordPress 5.3.21
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.16
WordPress 5.4.17
WordPress 5.4.18
WordPress 5.4.19
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.15
WordPress 5.5.16
WordPress 5.5.17
WordPress 5.5.18
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.14
WordPress 5.6.15
WordPress 5.6.16
WordPress 5.6.17
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.12
WordPress 5.7.13
WordPress 5.7.14
WordPress 5.7.15
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.12
WordPress 5.8.13
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.12
WordPress 5.9.13
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.11
WordPress 6.0.12
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.10
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.1.9
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.2.8
WordPress 6.2.9
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.3.7
WordPress 6.3.8
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.4.7
WordPress 6.4.8
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.5.7
WordPress 6.5.8
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.6.4
WordPress 6.6.5
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.7.4
WordPress 6.7.5
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.8.6
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

Privilege Escalation in WordPress Multisite Site Registration

Skrevet den 12. august 2026 af i WordPress

On WordPress multisite networks configured to allow user registration but not site creation, the site-signup stage of wp-signup.php did not consult the network’s registration setting before validating a new-site request. Any registered user could POST directly to that stage and create a new site, bypassing the restriction set by the network administrator. Only multisite installations with user registration enabled are affected.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0.24
WordPress 5.0.25
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.21
WordPress 5.1.22
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.21
WordPress 5.2.22
WordPress 5.2.23
WordPress 5.2.24
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.18
WordPress 5.3.19
WordPress 5.3.2
WordPress 5.3.20
WordPress 5.3.21
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.16
WordPress 5.4.17
WordPress 5.4.18
WordPress 5.4.19
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.15
WordPress 5.5.16
WordPress 5.5.17
WordPress 5.5.18
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.14
WordPress 5.6.15
WordPress 5.6.16
WordPress 5.6.17
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.12
WordPress 5.7.13
WordPress 5.7.14
WordPress 5.7.15
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.12
WordPress 5.8.13
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.12
WordPress 5.9.13
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.11
WordPress 6.0.12
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.10
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.1.9
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.2.8
WordPress 6.2.9
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.3.7
WordPress 6.3.8
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.4.7
WordPress 6.4.8
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.5.7
WordPress 6.5.8
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.6.4
WordPress 6.6.5
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.7.4
WordPress 6.7.5
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.8.6
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

Reflected Cross-Site Scripting in WordPress Login Screen

Skrevet den 12. august 2026 af i WordPress

An unauthenticated attacker can inject arbitrary HTML/JavaScript into the WordPress login and registration screens by submitting a crafted username or email address, which was reflected back into the authentication error messages without escaping. Successful exploitation runs in the victim’s browser session and can be escalated toward PHP code execution when an administrator is targeted. The same fix also closes an email address confirmation bypass in which send_confirmation_on_profile_email() trusted $_POST[‘user_id’] without verifying that any user was logged in.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0.24
WordPress 5.0.25
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.21
WordPress 5.1.22
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.21
WordPress 5.2.22
WordPress 5.2.23
WordPress 5.2.24
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.18
WordPress 5.3.19
WordPress 5.3.2
WordPress 5.3.20
WordPress 5.3.21
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.16
WordPress 5.4.17
WordPress 5.4.18
WordPress 5.4.19
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.15
WordPress 5.5.16
WordPress 5.5.17
WordPress 5.5.18
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.14
WordPress 5.6.15
WordPress 5.6.16
WordPress 5.6.17
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.12
WordPress 5.7.13
WordPress 5.7.14
WordPress 5.7.15
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.12
WordPress 5.8.13
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.12
WordPress 5.9.13
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.11
WordPress 6.0.12
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.10
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.1.9
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.2.8
WordPress 6.2.9
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.3.7
WordPress 6.3.8
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.4.7
WordPress 6.4.8
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.5.7
WordPress 6.5.8
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.6.4
WordPress 6.6.5
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.7.4
WordPress 6.7.5
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.8.6
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

Server-Side Request Forgery in WordPress URL Validation

Skrevet den 12. august 2026 af i WordPress

wp_http_validate_url() rejected only a small set of private IPv4 ranges, so a host resolving to 169.254.0.0/16 or another reserved range was treated as a valid external host. Features that fetch a user-supplied URL could therefore reach link-local and other internal-only endpoints, including cloud instance metadata services. The fix extends the reject list to link-local, CGNAT, IETF/TEST-NET, benchmarking, multicast and reserved ranges.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0.24
WordPress 5.0.25
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.21
WordPress 5.1.22
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.21
WordPress 5.2.22
WordPress 5.2.23
WordPress 5.2.24
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.18
WordPress 5.3.19
WordPress 5.3.2
WordPress 5.3.20
WordPress 5.3.21
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.16
WordPress 5.4.17
WordPress 5.4.18
WordPress 5.4.19
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.15
WordPress 5.5.16
WordPress 5.5.17
WordPress 5.5.18
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.14
WordPress 5.6.15
WordPress 5.6.16
WordPress 5.6.17
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.12
WordPress 5.7.13
WordPress 5.7.14
WordPress 5.7.15
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.12
WordPress 5.8.13
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.12
WordPress 5.9.13
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.11
WordPress 6.0.12
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.10
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.1.9
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.2.8
WordPress 6.2.9
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.3.7
WordPress 6.3.8
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.4.7
WordPress 6.4.8
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.5.7
WordPress 6.5.8
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.6.4
WordPress 6.6.5
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.7.4
WordPress 6.7.5
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.8.6
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

Stored Cross-Site Scripting in WordPress Emoji Loader Settings

Skrevet den 12. august 2026 af i WordPress

The emoji loader read its configuration from an element resolved with document.getElementById( ‘wp-emoji-settings’ ). Post content authored by a Contributor-level user can inject an element with that id (DOM clobbering), so the loader parses attacker-controlled JSON, including the script URLs it subsequently loads. This lets a Contributor execute arbitrary JavaScript in the browser of any visitor who views the post.

This vulnerability affects the following application versions:

WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

Stored Cross-Site Scripting in WordPress Post Content Block

Skrevet den 12. august 2026 af i WordPress

The Post Content block used any tagName block attribute as its wrapper element as long as it survived tag_escape(), which only strips characters that are invalid in a tag name. An authenticated user with Contributor privileges or higher could therefore set the wrapper tag to script and have arbitrary JavaScript executed in the browser of every visitor viewing the post. The fix restricts the wrapper tag to an allowlist of div, main, section and article.

This vulnerability affects the following application versions:

WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

Stored Cross-Site Scripting in WordPress Quick Edit Author Dropdown

Skrevet den 12. august 2026 af i WordPress

On sites with enough users that the post author is missing from the Quick Edit author dropdown, WordPress built the extra

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0.24
WordPress 5.0.25
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.21
WordPress 5.1.22
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.21
WordPress 5.2.22
WordPress 5.2.23
WordPress 5.2.24
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.18
WordPress 5.3.19
WordPress 5.3.2
WordPress 5.3.20
WordPress 5.3.21
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.16
WordPress 5.4.17
WordPress 5.4.18
WordPress 5.4.19
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.15
WordPress 5.5.16
WordPress 5.5.17
WordPress 5.5.18
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.14
WordPress 5.6.15
WordPress 5.6.16
WordPress 5.6.17
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.12
WordPress 5.7.13
WordPress 5.7.14
WordPress 5.7.15
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.12
WordPress 5.8.13
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.12
WordPress 5.9.13
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.11
WordPress 6.0.12
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.10
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.1.9
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.2.8
WordPress 6.2.9
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.3.7
WordPress 6.3.8
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.4.7
WordPress 6.4.8
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.5.7
WordPress 6.5.8
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.6.4
WordPress 6.6.5
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.7.4
WordPress 6.7.5
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.8.6
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 6.9.5
WordPress 7.0
WordPress 7.0.1
WordPress 7.0.2

SQL injection in the author__not_in parameter of WP_Query

Skrevet den 21. juli 202622. juli 2026 af i WordPress

WordPress 6.8+ builds the post_author NOT IN (…) clause in WP_Query from author__not_in but only sanitises the value when it is already an array u2014 a scalar (reachable via the REST author_exclude parameter) skips absint() and is injected straight into the SQL. From 6.9+ this chains with the REST batch-route confusion (CVE-2026-63030) for pre-auth Remote Code Execution.

This vulnerability affects the following application versions:

WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 7.0
WordPress 7.0.1

Unauthenticated REST API batch-route confusion leading to Remote Code Execution

Skrevet den 21. juli 202622. juli 2026 af i WordPress

WordPress 6.9.0u20136.9.4 and 7.0.0u20137.0.1 fail to add a placeholder to the batch handler’s $matches array when a REST sub-request errors, desynchronising it from the validation array so a later sub-request runs with the wrong route’s permission callback. Chained with the companion author_exclude SQL injection (CVE-2026-60137), an unauthenticated attacker can escalate to administrator and reach pre-auth Remote Code Execution (“wp2shell”).

This vulnerability affects the following application versions:

WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2
WordPress 6.8.3
WordPress 6.8.4
WordPress 6.8.5
WordPress 6.9
WordPress 6.9.1
WordPress 6.9.2
WordPress 6.9.3
WordPress 6.9.4
WordPress 7.0
WordPress 7.0.1

XSS in nav menus

Skrevet den 8. oktober 202518. oktober 2025 af i WordPress

A cross-site scripting (XSS) vulnerability requiring an authenticated user role that affects the nav menus.

This vulnerability affects the following application versions:

WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2

Authorization bypass allows access to restricted content

Skrevet den 3. oktober 2025 af i WordPress

A data exposure vulnerability was identified where authenticated users, despite having valid accounts, were able to access restricted content that should have been limited to higher-privileged roles. This flaw allowed users to view sensitive or otherwise unauthorized data by bypassing proper access control checks.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.8
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.21
WordPress 5.2.22
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.18
WordPress 5.3.19
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.16
WordPress 5.4.17
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.15
WordPress 5.5.16
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.14
WordPress 5.6.15
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.12
WordPress 5.7.13
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.10
WordPress 5.8.11
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.10
WordPress 5.9.11
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.10
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.0.9
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.1.7
WordPress 6.1.8
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.2.6
WordPress 6.2.7
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.3.5
WordPress 6.3.6
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.4.5
WordPress 6.4.6
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4
WordPress 6.5.5
WordPress 6.5.6
WordPress 6.6
WordPress 6.6.1
WordPress 6.6.2
WordPress 6.6.3
WordPress 6.7
WordPress 6.7.1
WordPress 6.7.2
WordPress 6.7.3
WordPress 6.8
WordPress 6.8.1
WordPress 6.8.2

XSS vulnerability in the footnotes block

Skrevet den 1. juli 202418. oktober 2025 af i WordPress

The footnotes block is not adequately protected against an XSS attack.

This vulnerability affects the following application versions:

WordPress 6.3
WordPress 6.3.1

XSS affecting the Template Part block

Skrevet den 28. juni 202418. oktober 2025 af i WordPress

The template part block is not properly escaped to prevent an XSS attack.

This vulnerability affects the following application versions:

WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4

Path traversal via sites hosted on windows

Skrevet den 28. juni 202418. oktober 2025 af i WordPress

A path was not normalized that led to path traversal issue affecting sites hosted on Windows.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.20
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.17
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.15
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.14
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.13
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.11
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.8.9
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 5.9.9
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.0.8
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.1.6
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4

XSS affecting the HTML API

Skrevet den 28. juni 202418. oktober 2025 af i WordPress

The HTML API tag processor is not properly escaped against an XSS attack.

This vulnerability affects the following application versions:

WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.2.5
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.3.4
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.4.4
WordPress 6.5
WordPress 6.5.2
WordPress 6.5.3
WordPress 6.5.4

XSS in the avatoar block

Skrevet den 10. april 202418. oktober 2025 af i WordPress

The Avatar block type is not properly escaped against an XSS attack.

This vulnerability affects the following application versions:

WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.0.7
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.1.5
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.2.4
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.3.3
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2
WordPress 6.4.3
WordPress 6.5

PHP File Upload bypass via Plugin Installer

Skrevet den 2. februar 202418. oktober 2025 af i WordPress

When populating options, they are not properly sanitized to prevent the remote code execution via file upload.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.20
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2

RCE POP Chains vulnerability via plugin or theme archive

Skrevet den 2. februar 202413. august 2026 af i WordPress

There is no proper check in place to ensure that only zip archives are uploaded.

This vulnerability affects the following application versions:

WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.7.34
WordPress 4.7.35
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.8.29
WordPress 4.8.30
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.20
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.19
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.16
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.14
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.13
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.12
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.10
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.8.8
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 5.9.8
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.0.6
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.1.4
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.2.3
WordPress 6.3
WordPress 6.3.1
WordPress 6.3.2
WordPress 6.4
WordPress 6.4.1
WordPress 6.4.2

RCE in core in a multisite install

Skrevet den 7. december 202318. oktober 2025 af i WordPress

A Remote Code Execution vulnerability that is a potential for high severity when combined with some plugins, especially in multisite installs.

This vulnerability affects the following application versions:

WordPress 6.4
WordPress 6.4.1

RCE POP Chains vulnerability

Skrevet den 26. oktober 202324. maj 2026 af i WordPress

Unserialized objects can lead to remote code execution, allowing an attacker to take control of all the properties of the deserialized object

This vulnerability affects the following application versions:

WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.3
WordPress 6.3.1
YourLS 1.10.0
YourLS 1.10.1
YourLS 1.10.2
YourLS 1.10.3
YourLS 1.10.4

Logged-in users are able to execute any shortcodes

Skrevet den 26. oktober 202318. oktober 2025 af i WordPress

Authenticated users can utilize any shortcodes without restrictions through an AJAX handler for media shortcodes.

This vulnerability affects the following application versions:

WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.23
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.3
WordPress 6.3.1

Cache poisoning DoS vulnerability

Skrevet den 26. oktober 202313. august 2026 af i WordPress

Ensure no-cache headers are sent when methods are ovverriden to avoid cache poisoning.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.7.34
WordPress 4.7.35
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.3
WordPress 6.3.1

Comments on private posts could be leaked to other users

Skrevet den 20. oktober 202320. november 2024 af i WordPress

Users who lack visibility to a post are also able to access or view the comments associated with it.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.3
WordPress 6.3.1

Potential disclosure of user email addresses

Skrevet den 20. oktober 202318. oktober 2025 af i WordPress

User email addresses are potentially disclosed because `search_columns` are not limited for users without list_users.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.18
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.15
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.13
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.12
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.3
WordPress 6.3.1

XSS issue in the post link navigation block

Skrevet den 20. oktober 202318. oktober 2025 af i WordPress

The post link in the navigation block is not properly checked or escaped against an XSS attack.

This vulnerability affects the following application versions:

WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.3
WordPress 6.3.1

XSS vulnerability in the application password screen

Skrevet den 20. oktober 202318. oktober 2025 af i WordPress

The application password screen is not properly escaped to prevent an XSS.

This vulnerability affects the following application versions:

WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.6.10
WordPress 5.6.11
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.7.9
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.8.7
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 5.9.7
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.0.5
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.1.3
WordPress 6.2
WordPress 6.2.1
WordPress 6.2.2
WordPress 6.3
WordPress 6.3.1

CSRF in setting attachment thumbnails

Skrevet den 1. juni 202313. august 2026 af i WordPress

The media is not properly prevented against CSRF when updating thumbnails attachments.

This vulnerability affects the following application versions:

WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.7.34
WordPress 4.7.35
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.28
WordPress 4.8.29
WordPress 4.8.30
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 4.9.30
WordPress 4.9.31
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.1
WordPress 6.1.1
WordPress 6.2

Add protocol validation for WordPress Embed code

Skrevet den 1. juni 202320. november 2024 af i WordPress

Validate that links within auto-discovered embeds are using the `http` or `https` protocols before following links.

This vulnerability affects the following application versions:

WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.1
WordPress 6.1.1
WordPress 6.2

code injection in parsing shortcodes in user generated data

Skrevet den 22. maj 202320. november 2024 af i WordPress

Shortcodes expose to code injection and removed as a result.

N.B. This is a fix for the release in 6.2.1

This vulnerability affects the following application versions:

WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 5.9.6
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.0.4
WordPress 6.1
WordPress 6.1.1
WordPress 6.1.2
WordPress 6.2
WordPress 6.2.1

A path traversal issue via translation files

Skrevet den 19. maj 202320. november 2024 af i WordPress

The translation files are not properly sanitized to prevent path traversal.

This vulnerability affects the following application versions:

WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.10
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.1
WordPress 6.1.1
WordPress 6.2

Block themes parsing shortcodes in user generated data

Skrevet den 19. maj 202320. november 2024 af i WordPress

Shortcodes expose to code injection and removed as a result.

This vulnerability affects the following application versions:

WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.1
WordPress 6.1.1
WordPress 6.2

Bypassing of KSES sanitization in block attributes for low privileged users

Skrevet den 19. maj 202320. november 2024 af i WordPress

The blocks are not properly sanitized to prevent an XSS attack via low privileged users.

This vulnerability affects the following application versions:

WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.17
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.14
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.12
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.5.10
WordPress 5.5.11
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.6.10
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.7.8
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.8.6
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 5.9.5
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2
WordPress 6.0.3
WordPress 6.1
WordPress 6.1.1
WordPress 6.2

CSRF in wp-trackback.php

Skrevet den 31. oktober 202220. november 2024 af i WordPress

Missing authentication settings can lead to CSRF attacks

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Stored XSS and information exposure via wp-mail.php

Skrevet den 31. oktober 202218. oktober 2025 af i WordPress

User authentication is not properly checked when the WordPress mail is run to prevent stored XSS. Additionally, adding email addresses from post-by-email logs are creating potential for information exposure vulnerability.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Leak in content from multipart emails and reverting shared objects for current user

Skrevet den 31. oktober 202218. oktober 2025 af i WordPress

Reset PHPMailer properties between use to prevent information disclosure and revert shared objects for the current user to also prevent information disclosure

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Reflected XSS via SQLi in media library

Skrevet den 31. oktober 202218. oktober 2025 af i WordPress

Missing filters in the SQL clauses of an attachment query to include filenames can lead to reflected XSS attacks.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

SQL injection in `WP_Date_Query`

Skrevet den 31. oktober 202218. oktober 2025 af i WordPress

Improper sanitization leads to SQL injection in `WP_Date_Query`.

This vulnerability affects the following application versions:

WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.5.10
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Stored XSS in the search block

Skrevet den 31. oktober 202218. oktober 2025 af i WordPress

The search block is not properly escaped against an XSS attack.

This vulnerability affects the following application versions:

WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Data exposure via the REST terms/tags endpoint

Skrevet den 31. oktober 202220. november 2024 af i WordPress

The terms/tags endpoints of the REST API expose data due to improper access control.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Stored XSS in RSS widget

Skrevet den 31. oktober 202218. oktober 2025 af i WordPress

RSS widget error messages are not properly sanitized to prevent a possible stored XSS attack.

This vulnerability affects the following application versions:

WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.20
WordPress 4.9.21
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Open redirect in wp_nonce_ays

Skrevet den 25. oktober 202218. oktober 2025 af i WordPress

The WordPress HTTP referer is not properly validated when a user is redirected.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Stored XSS via comment editing

Skrevet den 25. oktober 202218. oktober 2025 af i WordPress

Missing adequate checks during comment editing can lead to stored XSS attacks.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Stored XSS in the RSS block

Skrevet den 25. oktober 202218. oktober 2025 af i WordPress

The RSS block is not properly escaped to prevent a stored XSS attack.

This vulnerability affects the following application versions:

WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

XSS in the featured image blocks

Skrevet den 25. oktober 202218. oktober 2025 af i WordPress

The featured image blocks is not properly escaped to prevent an XSS attack.

This vulnerability affects the following application versions:

WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Stored XSS via the customizer

Skrevet den 25. oktober 202218. oktober 2025 af i WordPress

Some variables in the customizer are not escaped properly to prevent an XSS attack.

This vulnerability affects the following application versions:

WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.16
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.13
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.11
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.10
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.6.9
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.7.7
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

XSS in the widget block editor

Skrevet den 25. oktober 202218. oktober 2025 af i WordPress

The widget block editor is not properly escaped against an XSS attack.

This vulnerability affects the following application versions:

WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.8.5
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 5.9.4
WordPress 6.0
WordPress 6.0.1
WordPress 6.0.2

Output escaping issue within the_meta()

Skrevet den 2. september 202218. oktober 2025 af i WordPress

A variable in the_meta() function is not properly escaped to prevent an XSS attack.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 6.0
WordPress 6.0.1

SQL injection within the link API

Skrevet den 2. september 202218. oktober 2025 af i WordPress

The link API in the bookmark is not properly checked against an SQL injection.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 6.0
WordPress 6.0.1

XSS vulnerability on the plugins screen

Skrevet den 2. september 202218. oktober 2025 af i WordPress

The plugins screen is not properly escaped to prevent an XSS attack.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.14
WordPress 5.2.15
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.11
WordPress 5.3.12
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.10
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.4.9
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.5.8
WordPress 5.5.9
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.6.7
WordPress 5.6.8
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.7.5
WordPress 5.7.6
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2
WordPress 5.8.3
WordPress 5.8.4
WordPress 5.9
WordPress 5.9.1
WordPress 5.9.2
WordPress 5.9.3
WordPress 6.0
WordPress 6.0.1

XSS in the post slugs via encoding

Skrevet den 11. januar 202218. oktober 2025 af i WordPress

ASCII characters in post slugs is not encoded correctly which can lead to XSS

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2

Object injection in some multisite installations

Skrevet den 11. januar 202218. oktober 2025 af i WordPress

The multisite installation of WordPress is not properly sanitized to prevent object injection via the upgrade process.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2

SQL injection vulnerability in WP_Meta_Query

Skrevet den 11. januar 202218. oktober 2025 af i WordPress

Missing sanitization can lead to SQL injection in WP_Meta_Query

This vulnerability affects the following application versions:

WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2

SQL injection vulnerability in WP_Query

Skrevet den 11. januar 202218. oktober 2025 af i WordPress

Missing sanitization can lead to SQL injection in WP_Tax_Query

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2.12
WordPress 5.2.13
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.10
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.3.9
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.4.7
WordPress 5.4.8
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.5.6
WordPress 5.5.7
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.6.5
WordPress 5.6.6
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.7.3
WordPress 5.7.4
WordPress 5.8
WordPress 5.8.1
WordPress 5.8.2

Data exposure vulnerability within the REST API

Skrevet den 11. september 202120. november 2024 af i WordPress

Incorrect check in filtering the callback for killing WordPress execution for JSONP REST requests could lead to a data exposure vulnerability.

This vulnerability affects the following application versions:

WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2.10
WordPress 5.2.11
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.3.8
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.4.6
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.5.5
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.6.4
WordPress 5.7
WordPress 5.7.1
WordPress 5.7.2
WordPress 5.8

[CVE-2020-36326 – CVE-2018-19296] Object injection in PHPMailer

Skrevet den 14. maj 202120. november 2024 af i WordPress

CVE-2020-36326 – An external file could be unexpectedly executable if it was used as a path to an attachment file via PHP’s support for .phar files`. Exploitation requires that an attacker was able to provide an unfiltered path to a file to attach.

CVE-2018-19296 – Was vulnerable to an object injection attack by passing phar:// paths into addAttachment() and other functions that could receive unfiltered local paths, possibly lead to RCE.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.10
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.3.7
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.4.5
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.5.4
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.6.3
WordPress 5.7
WordPress 5.7.1

[REST API] Allow authors to read their own password protected posts

Skrevet den 16. april 202118. oktober 2025 af i WordPress

Allow authenticated users to read the contents of password protected posts if they have the `edit_post` meta capability for the post.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2.8
WordPress 5.2.9
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.3.5
WordPress 5.3.6
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.4.3
WordPress 5.4.4
WordPress 5.5
WordPress 5.5.1
WordPress 5.5.2
WordPress 5.5.3
WordPress 5.6
WordPress 5.6.1
WordPress 5.6.2
WordPress 5.7

3 Security improvements XML-RPC

Skrevet den 3. november 202020. november 2024 af i WordPress

[XML-RPC] Improve error messages for unprivileged users

Add specific permission checks to avoid ambiguous failure messages.

[XML-RPC] Fix length validation of anonymous commenter’s email address

Fix the first step of validating an anonymous commenters in which the length is checked prior to running regular expressions.

[XML-RPC] Return error message if attachment ID is incorrect

Throw an error for incorrect attachment IDs when requesting a media object to ensure return signature is correct and doesn’t include incorrectly typed values within the object.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2.7
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.3.4
WordPress 5.4
WordPress 5.4.1
WordPress 5.4.2
WordPress 5.5
WordPress 5.5.1

Prevent HTML decoding on by setting the proper editor context

Skrevet den 13. juni 202018. oktober 2025 af i WordPress

XSS issue where authenticated users with low privileges were able to add JavaScript to posts in the block editor.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.27
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.4
WordPress 5.4.1

Ensure that the title attribute is set correctly on embeds

Skrevet den 13. juni 202020. november 2024 af i WordPress

XSS issue where authenticated users with upload permissions were able to add JavaScript to media files.

This vulnerability affects the following application versions:

WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.4
WordPress 5.4.1

Authenticated XSS issue via theme uploads

Skrevet den 13. juni 202020. november 2024 af i WordPress

Unescaped variable could lead to authenticated XSS issue via theme uploads.

This vulnerability affects the following application versions:

WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.4
WordPress 5.4.1

Ensure latest comments can only be viewed from public posts

Skrevet den 13. juni 202013. august 2026 af i WordPress

Issue where comments from password-protected posts and pages could be displayed under certain conditions.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.7.34
WordPress 4.7.35
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.8.29
WordPress 4.8.30
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 4.9.30
WordPress 4.9.31
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.4
WordPress 5.4.1

Ensure that wp_validate_redirect() sanitizes a wider variety of characters

Skrevet den 13. juni 202020. november 2024 af i WordPress

Open redirect issue in wp_validate_redirect().

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.27
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.4
WordPress 5.4.1

Add a new filter to extend set-screen-option

Skrevet den 13. juni 202020. november 2024 af i WordPress

Issue where set-screen-option could be misused by plugins leading to privilege escalation.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.27
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2.5
WordPress 5.2.6
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3
WordPress 5.3.1
WordPress 5.3.2
WordPress 5.3.3
WordPress 5.4
WordPress 5.4.1

Prevent stored XSS in the block editor

Skrevet den 14. december 201918. oktober 2025 af i WordPress

Escaped unicode characters became unescaped in unsafe HTML during JSON decoding.

This vulnerability affects the following application versions:

WordPress 5.3

Ensure that a user can publish_posts before making a post sticky

Skrevet den 14. december 201920. november 2024 af i WordPress

Unprivileged user could make a post sticky via the REST API.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3

Update `wp_kses_bad_protocol()` to recognize `:` on uri attributes

Skrevet den 14. december 201918. oktober 2025 af i WordPress

Update makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.

This vulnerability affects the following application versions:

WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.10
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.11
WordPress 4.9.12
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3

Prevent stored XSS through wp_targeted_link_rel()

Skrevet den 14. december 201918. oktober 2025 af i WordPress

The wp_targeted_link_rel() function was not properly escaped against stored XSS.

This vulnerability affects the following application versions:

WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2.4
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
WordPress 5.3

A way to create a stored XSS to inject Javascript into style tags

Skrevet den 21. oktober 201920. november 2024 af i WordPress

Reject file paths that contain sub-directory paths.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.10
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2

Prevent unauthenticated views of publicly queryables content types

Skrevet den 21. oktober 201918. oktober 2025 af i WordPress

The static query property was removed in order to prevent unauthenticated view of publicly queryable content types.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.10
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2

Poisoning cache of JSON GET requests via the Vary: Origin header

Skrevet den 21. oktober 201918. oktober 2025 af i WordPress

A method to poison the cache of JSON GET requests via the Vary: Origin header was detected and prevented.

This vulnerability affects the following application versions:

WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2

A server-side request forgery in the way that URLs were validated

Skrevet den 21. oktober 201920. november 2024 af i WordPress

HTTP API: Protect against hex interpretation.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.10
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2

Issues related to referrer validation in the admin

Skrevet den 21. oktober 201918. oktober 2025 af i WordPress

Ensure that admin referrer nonce is valid.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.10
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2

Stored XSS (cross-site scripting) could be added via the Customizer

Skrevet den 21. oktober 201918. oktober 2025 af i WordPress

Adjusted registering scripts.

This vulnerability affects the following application versions:

WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.2
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2.3
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2

Strip tags and convert HTML entities in posts status text to prevent XSS

Skrevet den 9. september 201913. august 2026 af i WordPress

Post status display was vulnerable to XSS and was not properly sanitized.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.7.34
WordPress 4.7.35
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.8.29
WordPress 4.8.30
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 4.9.11
WordPress 4.9.12
WordPress 4.9.13
WordPress 4.9.14
WordPress 4.9.15
WordPress 4.9.16
WordPress 4.9.17
WordPress 4.9.18
WordPress 4.9.19
WordPress 4.9.20
WordPress 4.9.21
WordPress 4.9.22
WordPress 4.9.23
WordPress 4.9.24
WordPress 4.9.25
WordPress 4.9.26
WordPress 4.9.27
WordPress 4.9.28
WordPress 4.9.29
WordPress 4.9.30
WordPress 4.9.31
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.10
WordPress 5.0.11
WordPress 5.0.12
WordPress 5.0.13
WordPress 5.0.14
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0.6
WordPress 5.0.7
WordPress 5.0.8
WordPress 5.0.9
WordPress 5.0.15
WordPress 5.0.16
WordPress 5.0.17
WordPress 5.0.18
WordPress 5.0.19
WordPress 5.0.20
WordPress 5.0.21
WordPress 5.0.22
WordPress 5.0.23
WordPress 5.0.24
WordPress 5.0.25
WordPress 5.0.26
WordPress 5.0.27
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.1.10
WordPress 5.1.11
WordPress 5.1.12
WordPress 5.1.13
WordPress 5.1.14
WordPress 5.1.15
WordPress 5.1.16
WordPress 5.1.17
WordPress 5.1.18
WordPress 5.1.19
WordPress 5.1.2
WordPress 5.1.20
WordPress 5.1.21
WordPress 5.1.22
WordPress 5.1.23
WordPress 5.1.24
WordPress 5.1.3
WordPress 5.1.4
WordPress 5.1.5
WordPress 5.1.6
WordPress 5.1.7
WordPress 5.1.8
WordPress 5.1.9
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2
Classic Editor 0.1
Classic Editor 0.2
Classic Editor 0.3
Classic Editor 0.4
Classic Editor 0.5

Escape file name for wp_ajax_upload_attachment to prevent XSS

Skrevet den 9. september 201916. juni 2025 af i WordPress

Set also default MIME type to “text/plain” instead of HTML.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2

URL sanitation and validation in wp_kses_bad_protocol_once and wp_validate_redirect() to prevent open redirect

Skrevet den 9. september 201918. oktober 2025 af i WordPress

URL was not properly sanitized and validated to prevent open redirect and XSS.

This vulnerability affects the following application versions:

WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 4.9.10
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0.4
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1
WordPress 5.1.1
WordPress 5.2
WordPress 5.2.1
WordPress 5.2.2
WordPress 5.2 Beta 1
WordPress 5.2 Beta 2

Improve comment content filtering

Skrevet den 14. marts 201918. oktober 2025 af i WordPress

With a maliciously crafted comment, a WordPress post was vulnerable to cross-site scripting.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 4.9.9
WordPress 5.0
WordPress 5.0.1
WordPress 5.0.2
WordPress 5.0.3
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3
WordPress 5.1

Ability to create unauthorized posts types

Skrevet den 20. december 201820. november 2024 af i WordPress

Authors could create posts of unauthorized post types with specially crafted input.

Part of security release 5.0.1

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 5.0
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3

Bypass MIME verification by specifically crafted files

Skrevet den 20. december 201820. november 2024 af i WordPress

Authors on Apache-hosted sites could upload specifically crafted files that bypass MIME verification, leading to a cross-site scripting vulnerability.

Part of security release 5.0.1

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 5.0
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3

Object injection in metadata by contributors

Skrevet den 20. december 201818. oktober 2025 af i WordPress

Contributors could craft meta data in a way that could result in PHP object injection.

Part of security release 5.0.1

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 5.0
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3

Possible indexed activation screen could lead to exposure of sensitive information

Skrevet den 20. december 201818. oktober 2025 af i WordPress

The user activation screen could be indexed by search engines in some uncommon configurations which could lead to exposure of email addresses, and in some rare cases, default generated passwords.

Part of security release 5.0.1

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6
WordPress 4.9.7
WordPress 4.9.8
WordPress 5.0
WordPress 5.0 Beta 1
WordPress 5.0 Beta 2
WordPress 5.0 Beta 3
WordPress 5.0 Beta 4
WordPress 5.0 RC1
WordPress 5.0 RC2
WordPress 5.0 RC3

Clear post password cookie when logging out preventing privilege escalation

Skrevet den 10. juli 201820. november 2024 af i WordPress

Official description: Posts, Post Types: Clear post password cookie when logging out.

This vulnerability affects the following application versions:

WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6

Escape permalink values on edit screen to prevent XSS

Skrevet den 10. juli 201813. august 2026 af i WordPress

Official description: Comments: Escape permalink values on edit screen to prevent XSS.

This vulnerability affects the following application versions:

WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.4.24
WordPress 4.4.25
WordPress 4.4.26
WordPress 4.4.27
WordPress 4.4.28
WordPress 4.4.29
WordPress 4.4.30
WordPress 4.4.31
WordPress 4.4.32
WordPress 4.4.33
WordPress 4.4.34
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.5.23
WordPress 4.5.24
WordPress 4.5.25
WordPress 4.5.26
WordPress 4.5.27
WordPress 4.5.28
WordPress 4.5.29
WordPress 4.5.30
WordPress 4.5.31
WordPress 4.5.32
WordPress 4.5.33
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.6.20
WordPress 4.6.21
WordPress 4.6.22
WordPress 4.6.23
WordPress 4.6.24
WordPress 4.6.25
WordPress 4.6.26
WordPress 4.6.27
WordPress 4.6.28
WordPress 4.6.29
WordPress 4.6.30
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.7.34
WordPress 4.7.35
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.8.29
WordPress 4.8.30
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6

Harden randomness of hash for user/admin email address changes

Skrevet den 10. juli 201820. november 2024 af i WordPress

Official description: Harden the random aspect of the hash used for user profile and admin email address changes.

This vulnerability affects the following application versions:

WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6

New privacy logic and enhancements added

Skrevet den 10. juli 201818. oktober 2025 af i WordPress

Official description:

Privacy: Correct the error check when creating an export folder in `wp_privacy_generate_personal_data_export_file()`.

Privacy: Make sure `wp_add_privacy_policy_content()` does not cause a fatal error by unintentionally flushing rewrite rules outside of the admin context.

Privacy: Only link to menus panel in Customizer if selected privacy page can be accessed there.

This vulnerability affects the following application versions:

WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6

Taxonomy improve cache handling for term queries

Skrevet den 10. juli 201813. august 2026 af i WordPress

Not supported objects could be inserted into the “term queries” cache causing potential code injection.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.7.19
WordPress 4.7.20
WordPress 4.7.21
WordPress 4.7.22
WordPress 4.7.23
WordPress 4.7.24
WordPress 4.7.25
WordPress 4.7.26
WordPress 4.7.27
WordPress 4.7.28
WordPress 4.7.29
WordPress 4.7.30
WordPress 4.7.31
WordPress 4.7.32
WordPress 4.7.33
WordPress 4.7.34
WordPress 4.7.35
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.8.15
WordPress 4.8.16
WordPress 4.8.17
WordPress 4.8.18
WordPress 4.8.19
WordPress 4.8.20
WordPress 4.8.21
WordPress 4.8.22
WordPress 4.8.23
WordPress 4.8.24
WordPress 4.8.25
WordPress 4.8.26
WordPress 4.8.27
WordPress 4.8.28
WordPress 4.8.29
WordPress 4.8.30
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6

User with certain capabilities could delete files outside uploads directory

Skrevet den 10. juli 201818. oktober 2025 af i WordPress

Official description: a file deletion issue where a user with the capability to edit and delete media files could potentially manipulate media metadata to attempt to delete files outside the uploads directory.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6

Use the correct escaping function when outputting the meta box context to prevent XSS

Skrevet den 10. juli 201818. oktober 2025 af i WordPress

Official description: Use the correct escaping function when outputting the meta box context.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.4.15
WordPress 4.4.16
WordPress 4.4.17
WordPress 4.4.18
WordPress 4.4.19
WordPress 4.4.20
WordPress 4.4.21
WordPress 4.4.22
WordPress 4.4.23
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.5.14
WordPress 4.5.15
WordPress 4.5.16
WordPress 4.5.17
WordPress 4.5.18
WordPress 4.5.19
WordPress 4.5.20
WordPress 4.5.21
WordPress 4.5.22
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.6.11
WordPress 4.6.12
WordPress 4.6.13
WordPress 4.6.14
WordPress 4.6.15
WordPress 4.6.16
WordPress 4.6.17
WordPress 4.6.18
WordPress 4.6.19
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.7.10
WordPress 4.7.11
WordPress 4.7.12
WordPress 4.7.13
WordPress 4.7.14
WordPress 4.7.15
WordPress 4.7.16
WordPress 4.7.17
WordPress 4.7.18
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.8.6
WordPress 4.8.7
WordPress 4.8.8
WordPress 4.8.9
WordPress 4.8.10
WordPress 4.8.11
WordPress 4.8.12
WordPress 4.8.13
WordPress 4.8.14
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4
WordPress 4.9.5
WordPress 4.9.6

Make sure the version string is correctly escaped for use in generator tags

Skrevet den 5. april 201818. oktober 2025 af i WordPress

Escape HTML returned from `get_the_generator()`.

WordPress 4.9.5 Security and Maintenance Release

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4

Use safe redirects when redirecting the login page if SSL is forced

Skrevet den 5. april 201818. oktober 2025 af i WordPress

Switch to `wp_safe_redirect()` when redirecting the login page when SSL is forced.

WordPress 4.9.5 Security and Maintenance Release

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.4.13
WordPress 4.4.14
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4

HTTP: Don’t treat `localhost` as same host by default

Skrevet den 5. april 201820. november 2024 af i WordPress

Disallow localhost in `wp_http_validate_url()`.

WordPress 4.9.5 Security and Maintenance Release

This vulnerability affects the following application versions:

WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.5.12
WordPress 4.5.13
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.6.9
WordPress 4.6.10
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.7.8
WordPress 4.7.9
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.8.4
WordPress 4.8.5
WordPress 4.9
WordPress 4.9.1
WordPress 4.9.2
WordPress 4.9.3
WordPress 4.9.4

[20171130] Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom

Skrevet den 30. november 201720. november 2024 af i WordPress

Hardening: Ensure the attributes of enclosures are correctly escaped in RSS and Atom feeds.

https://core.trac.wordpress.org/changeset/42260

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.9

Remove the ability to upload JavaScript files for users who do not have the unfiltered_html capability

Skrevet den 30. november 201718. oktober 2025 af i WordPress

Missing input validation allowed users to upload JavaScript files, even when they did not have the unfiltered_html capability.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.9

Escaping added to the language attributes used on html elements

Skrevet den 30. november 201720. november 2024 af i WordPress

Added escaping to language attributes in the general template.

https://github.com/WordPress/WordPress/commit/3713ac5ebc90fb2011e98dfd691420f43da6c09a

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.9

Use a properly generated hash for the newbloguser key instead of a determinate substring

Skrevet den 30. november 201718. oktober 2025 af i WordPress

The new blog user hash that is generated is a determinate substring, allowing an attacker to calculate the hash.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.4.12
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.5.11
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.6.8
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.7.7
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2
WordPress 4.8.3
WordPress 4.9

[20171031] Changed behaviour of esc_sql() in WordPress 4.8.3

Skrevet den 1. november 201720. november 2024 af i WordPress

WordPress versions 4.8.2 and earlier are affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability.

This vulnerability affects the following application versions:

WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.4.11
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.5.10
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.6.7
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.7.6
WordPress 4.8
WordPress 4.8.1
WordPress 4.8.2

[20170920] A cross-site scripting (XSS) vulnerability was discovered in the link modal

Skrevet den 22. september 201720. november 2024 af i WordPress

A cross-site scripting (XSS) vulnerability was discovered in the link modal. WordPress link preview may allow adversaries to display crafted URLs that contain JavaScript code or URLs to sites that can manipulate the origin page through `window.opener` browser DOM property.

This vulnerability affects the following application versions:

WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.8
WordPress 4.8.1

XSS vulnerability in plugin editor

Skrevet den 22. september 201722. august 2024 af i WordPress

A cross-site scripting (XSS) vulnerability was discovered in the plugin editor. Reported by 陈瑞琦 (Chen Ruiqi).

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.8
WordPress 4.8.1

[20170920] An open redirect was discovered on the user and term edit screens

Skrevet den 22. september 201720. november 2024 af i WordPress

An open redirect was discovered on the user and term edit screens.. The button “Back to Users” in the users and term page in the admin admin redirects to the HTTP referrer address without verification.

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.8
WordPress 4.8.1

XSS vulnerability in oEmbed

Skrevet den 22. september 201722. august 2024 af i WordPress

A cross-site scripting (XSS) vulnerability was discovered in the oEmbed discovery. Reported by xknown of the WordPress Security Team.

This vulnerability affects the following application versions:

WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.8
WordPress 4.8.1

XSS vulnerability in template names

Skrevet den 22. september 201722. august 2024 af i WordPress

A cross-site scripting (XSS) vulnerability was discovered in template names. Reported by Luka (sikic).

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.8
WordPress 4.8.1

XSS vulnerability in the visual editor

Skrevet den 22. september 201722. august 2024 af i WordPress

A cross-site scripting (XSS) vulnerability was discovered in the visual editor. Reported by Rodolfo Assis (@brutelogic) of Sucuri Security.

This vulnerability affects the following application versions:

WordPress 4.8.1

Path traversal vulnerability in the customizer

Skrevet den 22. september 201718. oktober 2025 af i WordPress

A path traversal vulnerability was discovered in the customizer.

This vulnerability affects the following application versions:

WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.7.33
WordPress 3.7.34
WordPress 3.7.35
WordPress 3.7.36
WordPress 3.7.37
WordPress 3.7.38
WordPress 3.7.39
WordPress 3.7.40
WordPress 3.7.41
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.8.33
WordPress 3.8.34
WordPress 3.8.35
WordPress 3.8.36
WordPress 3.8.37
WordPress 3.8.38
WordPress 3.8.39
WordPress 3.8.40
WordPress 3.8.41
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 3.9.31
WordPress 3.9.32
WordPress 3.9.33
WordPress 3.9.34
WordPress 3.9.35
WordPress 3.9.36
WordPress 3.9.37
WordPress 3.9.39
WordPress 3.9.40
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.0.30
WordPress 4.0.31
WordPress 4.0.32
WordPress 4.0.33
WordPress 4.0.34
WordPress 4.0.35
WordPress 4.0.36
WordPress 4.0.37
WordPress 4.0.38
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.1.30
WordPress 4.1.31
WordPress 4.1.32
WordPress 4.1.33
WordPress 4.1.34
WordPress 4.1.35
WordPress 4.1.36
WordPress 4.1.37
WordPress 4.1.38
WordPress 4.1.39
WordPress 4.1.40
WordPress 4.1.41
WordPress 4.1.42
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.2.27
WordPress 4.2.28
WordPress 4.2.29
WordPress 4.2.30
WordPress 4.2.31
WordPress 4.2.32
WordPress 4.2.33
WordPress 4.2.34
WordPress 4.2.35
WordPress 4.2.36
WordPress 4.2.37
WordPress 4.2.38
WordPress 4.2.39
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.3.23
WordPress 4.3.24
WordPress 4.3.25
WordPress 4.3.26
WordPress 4.3.27
WordPress 4.3.28
WordPress 4.3.29
WordPress 4.3.30
WordPress 4.3.31
WordPress 4.3.32
WordPress 4.3.33
WordPress 4.3.34
WordPress 4.3.35
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.8
WordPress 4.8.1

Unsafe queries can lead to potential SQL injection

Skrevet den 22. september 201718. oktober 2025 af i WordPress

$wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but added hardening to prevent plugins and themes from accidentally causing a vulnerability.

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.8
WordPress 4.8.1

Path traversal vulnerability in file unzipping

Skrevet den 22. september 201718. oktober 2025 af i WordPress

A path traversal vulnerability was discovered in the file unzipping code. Reported by Alex Chapman (noxrnet).

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.4.10
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.5.9
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.6.6
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4
WordPress 4.7.5
WordPress 4.8
WordPress 4.8.1

Cross Site Request Forgery (CSRF) vulnerability in filesystem credentials dialog

Skrevet den 18. maj 201720. november 2024 af i WordPress

A Cross Site Request Forgery (CRSF) vulnerability was discovered in the filesystem credentials dialog.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4

Cross-site scripting (XSS) vulnerability when uploading very large files

Skrevet den 18. maj 201720. november 2024 af i WordPress

A cross-site scripting (XSS) vulnerability was discovered when attempting to upload very large files.

This vulnerability affects the following application versions:

WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4

[20170516] Lack of capability checks for post meta data in the XML-RPC API

Skrevet den 18. maj 201720. november 2024 af i WordPress

Lack of capability checks for post meta data in the XML-RPC API. Reported by Ben Bidner of the WordPress Security Team.

Files:

* wp-includes/class-wp-xmlrpc-server.php

https://github.com/WordPress/WordPress/commit/0f3180de0203cc6874dafdd713c4b8e8880e2d10

Part of release 4.7.5

This vulnerability affects the following application versions:

WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4

Insufficient redirect validation in the HTTP class

Skrevet den 18. maj 201718. oktober 2025 af i WordPress

Part of release 4.7.5

This vulnerability affects the following application versions:

WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4

[20170516] Improper handling of post meta data values in the XML-RPC API

Skrevet den 18. maj 201720. november 2024 af i WordPress

Improper handling of post meta data values in the XML-RPC API. Reported by Sam Thomas.

Part of WordPress release 4.7.5.

https://github.com/WordPress/WordPress/commit/031cbb0548fcf0212b8f8136fdba0e9d119f7b84

This vulnerability affects the following application versions:

WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4

A cross-site scripting (XSS) vulnerability was discovered related to the Customizer

Skrevet den 18. maj 201720. november 2024 af i WordPress

Part of release 4.7.5

https://github.com/WordPress/WordPress/commit/3d10fef22d788f29aed745b0f5ff6f6baea69af3

This vulnerability affects the following application versions:

WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.4.8
WordPress 4.4.9
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.5.7
WordPress 4.5.8
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.6.4
WordPress 4.6.5
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3
WordPress 4.7.4

Changed filter for $taxonomies parameter

Skrevet den 24. april 201720. november 2024 af i WordPress

Part of WordPress release 4.7.4

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.4
WordPress 4.4.1
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2
WordPress 4.7.3

[20170306] Cross-site request forgery (CSRF) in Press This leading to denial-of-service

Skrevet den 8. marts 201720. november 2024 af i WordPress

A Cross-Site Request Forgery (CSRF) vulnerability exists on the Press This page of WordPress. This issue can be used to create a Denial of Service (DoS) condition if an authenticated administrator visits a malicious URL.

This vulnerability affects the following application versions:

WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2

[20170306] Cross-site scripting (XSS) via taxonomy term names

Skrevet den 8. marts 201720. november 2024 af i WordPress

The name of a taxonomy term was left out of cross-site scripting prevention.

This vulnerability affects the following application versions:

WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2

[20170306] Cross-site scripting (XSS) via media file metadata

Skrevet den 8. marts 201720. november 2024 af i WordPress

WordPress versions 4.7.2 and earlier contain a Cross-site scripting (XSS) vulnerability in the media file metadata which can be exploited by hackers.

This vulnerability affects the following application versions:

WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.7.19
WordPress 3.7.20
WordPress 3.7.21
WordPress 3.7.22
WordPress 3.7.23
WordPress 3.7.24
WordPress 3.7.25
WordPress 3.7.26
WordPress 3.7.27
WordPress 3.7.28
WordPress 3.7.29
WordPress 3.7.30
WordPress 3.7.31
WordPress 3.7.32
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.8.19
WordPress 3.8.20
WordPress 3.8.21
WordPress 3.8.22
WordPress 3.8.23
WordPress 3.8.24
WordPress 3.8.25
WordPress 3.8.26
WordPress 3.8.27
WordPress 3.8.28
WordPress 3.8.29
WordPress 3.8.30
WordPress 3.8.31
WordPress 3.8.32
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 3.9.17
WordPress 3.9.18
WordPress 3.9.19
WordPress 3.9.20
WordPress 3.9.21
WordPress 3.9.22
WordPress 3.9.23
WordPress 3.9.24
WordPress 3.9.25
WordPress 3.9.26
WordPress 3.9.27
WordPress 3.9.28
WordPress 3.9.29
WordPress 3.9.30
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.0.16
WordPress 4.0.17
WordPress 4.0.18
WordPress 4.0.19
WordPress 4.0.20
WordPress 4.0.21
WordPress 4.0.22
WordPress 4.0.23
WordPress 4.0.24
WordPress 4.0.25
WordPress 4.0.26
WordPress 4.0.27
WordPress 4.0.28
WordPress 4.0.29
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.1.19
WordPress 4.1.20
WordPress 4.1.21
WordPress 4.1.22
WordPress 4.1.23
WordPress 4.1.24
WordPress 4.1.25
WordPress 4.1.26
WordPress 4.1.27
WordPress 4.1.28
WordPress 4.1.29
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.2.16
WordPress 4.2.17
WordPress 4.2.18
WordPress 4.2.19
WordPress 4.2.20
WordPress 4.2.21
WordPress 4.2.22
WordPress 4.2.23
WordPress 4.2.24
WordPress 4.2.25
WordPress 4.2.26
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.3.12
WordPress 4.3.13
WordPress 4.3.14
WordPress 4.3.15
WordPress 4.3.16
WordPress 4.3.17
WordPress 4.3.18
WordPress 4.3.19
WordPress 4.3.20
WordPress 4.3.21
WordPress 4.3.22
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2

[20170306] Unintended files could be deleted by administrators using the plugin deletion functionality

Skrevet den 8. marts 201720. november 2024 af i WordPress

Part of security release WordPress 4.7.3.

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2

[20170306] Cross-site scripting via video URL in YouTube embeds

Skrevet den 8. marts 201720. november 2024 af i WordPress

The use of YouTube video URLs allows cross-site scripting.

This vulnerability affects the following application versions:

WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2

[20170306] Control characters can trick redirect URL validation

Skrevet den 8. marts 201720. november 2024 af i WordPress

The use of special control characters in a redirect URL can circumvent the URL validation.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.7.18
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.8.18
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 3.9.16
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.0.15
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.4.7
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.5.6
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.6.3
WordPress 4.7
WordPress 4.7.1
WordPress 4.7.2

[20170126] WP_Query is vulnerable to a SQL injection (SQLi) when passing unsafe data

Skrevet den 30. januar 201720. november 2024 af i WordPress

WP_Query is vulnerable to a SQL injection (SQLi) when passing unsafe data. WordPress core is not directly vulnerable to this issue, but we’ve added hardening to prevent plugins and themes from accidentally causing a vulnerability.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.7
WordPress 4.7.1

[20170126] The user interface for assigning taxonomy terms in “Press This” is shown to users who do not have permissions to use it

Skrevet den 30. januar 201720. november 2024 af i WordPress

WordPress’s “Press This” contains an exploit that allows users to add taxonomy terms, even if they do not have permissions to do so.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.7
WordPress 4.7.1

[20170126] The post list table is vulnerable to a cross-site scripting (XSS) attack

Skrevet den 30. januar 201720. november 2024 af i WordPress

A cross-site scripting (XSS) vulnerability was discovered in the posts list table which allows hackers to inject malicious code.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.7.17
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.8.17
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 3.9.15
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.0.14
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.4.6
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.5.5
WordPress 4.6
WordPress 4.6.1
WordPress 4.6.2
WordPress 4.7
WordPress 4.7.1

[20170112] Post via email checks mail.example.com if default settings aren’t changed

Skrevet den 12. januar 201720. november 2024 af i WordPress

Post via email checks mail.example.com if the default settings aren’t changed, which can be abused by attacks to add posts.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.6
WordPress 4.6.1
WordPress 4.7

[20170112] CSRF in accessibility mode of widget edit page

Skrevet den 12. januar 201720. november 2024 af i WordPress

The accessibility mode of the widget edit page has a simple cross-site request forgery vulnerability due to the lack of a nonce check.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.6
WordPress 4.6.1
WordPress 4.7

[20170112] Public posts disclose user information through the REST API

Skrevet den 12. januar 201720. november 2024 af i WordPress

The REST API exposes user data for all users who had authored a post of a public post type. The patch limits this to only post types which have specified that they should be shown within the REST API.

This vulnerability affects the following application versions:

WordPress 4.7

[20170112] Weak cryptography security for multisite activation key

Skrevet den 12. januar 201720. november 2024 af i WordPress

The activation key for multisite installations is not fully random. The predictable nature of this key weakens its cryptographical properties and allows potential information disclosure.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.6
WordPress 4.6.1
WordPress 4.7

[20170112] Cross-site request forgery (CSRF) bypass via uploading a Flash file

Skrevet den 12. januar 201720. november 2024 af i WordPress

Cross-site request forgery (CSRF) bypass via uploading a Flash file

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.6
WordPress 4.6.1
WordPress 4.7

[20170112] Cross-site scripting (XSS) via theme name fallback

Skrevet den 12. januar 201720. november 2024 af i WordPress

Inadequate escaping in the theme name fallback leads to a XSS vulnerability which can be abused by attackers to execute malicious code.

This vulnerability affects the following application versions:

WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.6
WordPress 4.6.1
WordPress 4.7

[20170112] Cross-site scripting (XSS) via the plugin name or version header on update-core.php

Skrevet den 12. januar 201720. november 2024 af i WordPress

Cross-site scripting (XSS) via the plugin name or version header on update-core.php

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.6
WordPress 4.6.1
WordPress 4.7

[CVE-2016-10045] Remote Code Execution in PHPMailer

Skrevet den 28. december 201620. november 2024 af i WordPress

An independent researcher uncovered a critical vulnerability in PHPMailer that could potentially be used by (unauthenticated) remote attackers to achieve remote arbitrary code execution in the context of the web server user and remotely compromise the target web application.

To exploit the vulnerability an attacker could target common website components such as contact/feedback forms, registration forms, password email resets and others that send out emails with the help of a vulnerable version of the PHPMailer class.

This patch follows and supersedes the patch for CVE-2016-1033.

This vulnerability affects the following application versions:

WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.6
WordPress 4.6.1
WordPress 4.7

[CVE-2016-10033] Remote Code Execution in PHPMailer

Skrevet den 27. december 201620. november 2024 af i WordPress

This vulnerability affects the following application versions:

WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.7.16
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.8.16
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 3.9.14
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.0.13
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.4.5
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.5.4
WordPress 4.6
WordPress 4.6.1
WordPress 4.7

Cross-site scripting vulnerability via image filename

Skrevet den 8. september 201620. november 2024 af i WordPress

Hackers can abuse the file image upload filename to execute a “cross-site scripting” (XSS) attack.

This vulnerability affects the following application versions:

WordPress 2.5
WordPress 2.5.1
WordPress 2.6
WordPress 2.6.1
WordPress 2.6.2
WordPress 2.6.3
WordPress 2.6.5
WordPress 2.7
WordPress 2.7.1
WordPress 2.8
WordPress 2.8.1
WordPress 2.8.2
WordPress 2.8.3
WordPress 2.8.4
WordPress 2.8.5
WordPress 2.8.6
WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.6

Path traversal vulnerability in the upgrade package uploader

Skrevet den 8. september 201618. oktober 2025 af i WordPress

A user that has access to the upgrader module can use a specially crafted filename to upload a file in different location.

This vulnerability affects the following application versions:

WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.7.15
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.8.15
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 3.9.13
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.0.12
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.4.4
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2
WordPress 4.5.3
WordPress 4.6

[20160621] Unauthorized category removal from a post

Skrevet den 30. juni 201620. november 2024 af i WordPress

Unauthorized category removal from a post, reported by David Herrera from Alley Interactive

https://codex.wordpress.org/Version_4.5.3

This vulnerability affects the following application versions:

WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2

[20160621] Redirect bypass in the customizer

Skrevet den 29. juni 201620. november 2024 af i WordPress

Redirect bypass in the customizer.

https://wordpress.org/news/2016/06/wordpress-4-5-3/

This vulnerability affects the following application versions:

WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2

[20160621] Revision history information disclosure

Skrevet den 29. juni 201620. november 2024 af i WordPress

Revision history information disclosure, reported independently by John Blackbourn from the WordPress security team and by Dan Moen.

https://codex.wordpress.org/Version_4.5.3

This vulnerability affects the following application versions:

WordPress 2.6
WordPress 2.6.1
WordPress 2.6.2
WordPress 2.6.3
WordPress 2.6.5
WordPress 2.7
WordPress 2.7.1
WordPress 2.8
WordPress 2.8.1
WordPress 2.8.2
WordPress 2.8.3
WordPress 2.8.4
WordPress 2.8.5
WordPress 2.8.6
WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2

[20160621] Two different XSS problems via attachment names

Skrevet den 29. juni 201620. november 2024 af i WordPress

Two different XSS problems via attachment names, reported by Jouko Pynnönen and Divyesh Prajapati

https://codex.wordpress.org/Version_4.5.3

This vulnerability affects the following application versions:

WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2

[20160621] Less secure santize_file_name edge case

Skrevet den 29. juni 201620. november 2024 af i WordPress

Less secure sanitize_file_name edge cases reported by Peter Westwood of the WordPress security team

https://codex.wordpress.org/Version_4.5.3

This vulnerability affects the following application versions:

WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.5.1
WordPress 4.5.2

[20160621] oEmbed Denial of Service

Skrevet den 29. juni 201620. november 2024 af i WordPress

oEmbed denial of service reported by Jennifer Dodd from Automattic

https://wordpress.org/news/2016/06/wordpress-4-5-3/

This vulnerability affects the following application versions:

WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2

[20160621] Password change via stolen cookie

Skrevet den 29. juni 201620. november 2024 af i WordPress

Password change via stolen cookie, reported by Michael Adams from the WordPress security team.

https://codex.wordpress.org/Version_4.5.3

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.7.14
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.8.14
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 3.9.12
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.0.11
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2
WordPress 4.4.3
WordPress 4.5
WordPress 4.5.1
WordPress 4.5.2

Reflected XSS on the network settings page

Skrevet den 18. maj 201618. oktober 2025 af i WordPress

Previous versions contain a possible Cross-Site Scripting (XSS) exploit on the network settings page that can be exploited by hackers.

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10

Script compression option cross-site request forgery (CSRF)

Skrevet den 19. april 201618. oktober 2025 af i WordPress

In previous versions the compression option contains a cross-site request forgery (CSRF) vulnerability that can be exploited by hackers.

This vulnerability affects the following application versions:

WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.1.11
WordPress 4.1.12
WordPress 4.1.13
WordPress 4.1.14
WordPress 4.1.15
WordPress 4.1.16
WordPress 4.1.17
WordPress 4.1.18
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.2.8
WordPress 4.2.9
WordPress 4.2.10
WordPress 4.2.11
WordPress 4.2.12
WordPress 4.2.13
WordPress 4.2.14
WordPress 4.2.15
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.3.4
WordPress 4.3.5
WordPress 4.3.6
WordPress 4.3.7
WordPress 4.3.8
WordPress 4.3.9
WordPress 4.3.10
WordPress 4.3.11
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2

Reflected XSS on the network settings page

Skrevet den 19. april 201618. oktober 2025 af i WordPress

Previous versions contain a possible Cross-Site Scripting (XSS) exploit on the network settings page that can be exploited by hackers.

This vulnerability affects the following application versions:

WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2

SSRF Bypass using Octal & Hexedecimal IP addresses

Skrevet den 19. april 201618. oktober 2025 af i WordPress

Previous versions contain a possible Server Side Request Forgery (SSRF) exploit in the HTTP URL validator by using Octal & Hexedecimal IP addresses.

This vulnerability affects the following application versions:

WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.7.13
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.8.13
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 3.9.11
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.0.10
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.1.10
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.2.7
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.3.3
WordPress 4.4
WordPress 4.4.1
WordPress 4.4.2

Open redirection vulnerability in WordPress version 4.4.1 and earlier

Skrevet den 4. februar 201618. oktober 2025 af i WordPress

WordPress version 4.4.1 and previous are vulnerable to an open redirection attack.

A open redirect is a vulnerability which can be used to get access without having the proper authorization. This vulnerability can be used in phishing attacks.

https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/

This vulnerability affects the following application versions:

WordPress 2.3
WordPress 2.3.1
WordPress 2.3.2
WordPress 2.3.3
WordPress 2.5
WordPress 2.5.1
WordPress 2.6
WordPress 2.6.1
WordPress 2.6.2
WordPress 2.6.3
WordPress 2.6.5
WordPress 2.7
WordPress 2.7.1
WordPress 2.8
WordPress 2.8.1
WordPress 2.8.2
WordPress 2.8.3
WordPress 2.8.4
WordPress 2.8.5
WordPress 2.8.6
WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.4
WordPress 4.4.1

SSRF vulnerability for certain local URIs

Skrevet den 4. februar 201618. oktober 2025 af i WordPress

WordPress version 4.4.1 and previous contain a possible Server Side Request Forgery (SSRF) exploit in the HTTP URL validator.

https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.7.12
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.8.12
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 3.9.10
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.0.9
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.1.9
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.2.6
WordPress 4.3
WordPress 4.3.1
WordPress 4.3.2
WordPress 4.4
WordPress 4.4.1

XSS vulnerability in WordPress version 4.4 and earlier

Skrevet den 11. januar 201622. august 2024 af i WordPress

WordPress versions 4.4 and earlier are affected by a cross-site scripting vulnerability that could allow a site to be compromised.

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.7.10
WordPress 3.7.11
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.8.10
WordPress 3.8.11
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 3.9.8
WordPress 3.9.9
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.0.7
WordPress 4.0.8
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.1.7
WordPress 4.1.8
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3
WordPress 4.2.4
WordPress 4.2.5
WordPress 4.3
WordPress 4.3.1
WordPress 4.4
Akismet 2.5.3
Akismet 2.5.6
Akismet 2.5.7
Akismet 2.5.8
Akismet 2.5.9
Akismet 2.6.0
Akismet 3.0.0
Akismet 3.0.1
Akismet 3.0.2
Akismet 3.0.4
Akismet 3.1
Akismet 3.1.1
Akismet 3.1.3

XSS through inadequate HTML sanitation

Skrevet den 17. september 201522. august 2024 af i WordPress

WordPress versions 4.2.2 and earlier are affected by a cross-site scripting vulnerability, which could allow users with the Contributor or Author role to compromise a site.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2

Attacker can lock posts

Skrevet den 17. september 201520. november 2024 af i WordPress

WordPress 4.2.3 and earlier allow an attacker to lock posts.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5731

https://core.trac.wordpress.org/changeset/33542

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3

Potential timing side-channel attack

Skrevet den 17. september 201518. oktober 2025 af i WordPress

WordPress 4.2.3 and earlier are vulnerable to a timing side-channel attack.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5730

https://core.trac.wordpress.org/changeset/33535

This vulnerability affects the following application versions:

WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3

SQL injection in comment posting

Skrevet den 17. september 201518. oktober 2025 af i WordPress

WordPress 4.2.3 and earlier are vulnerable to a SQL injection in comment posting due to insufficient escaping.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2213

https://core.trac.wordpress.org/changeset/33555

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3

XSS in links on the legacy theme preview

Skrevet den 17. september 201522. august 2024 af i WordPress

WordPress 4.2.3 and earlier are vulnerable to a XSS vulnerability through broken links on the legacy theme preview.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5734

https://core.trac.wordpress.org/changeset/33549

This vulnerability affects the following application versions:

WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3

XSS in navigation through inadequate HTML sanitation

Skrevet den 17. september 201522. august 2024 af i WordPress

WordPress 4.2.3 and earlier are vulnerable to a cross-site scripting vulnerability where navigation titles were insufficiently escaped.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5733

https://core.trac.wordpress.org/changeset/33540

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 4.0
WordPress 4.0.1
WordPress 4.1
WordPress 4.1.1
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3

XSS in widget title through inadequate HTML sanitation

Skrevet den 17. september 201522. august 2024 af i WordPress

WordPress 4.2.3 and earlier are affected by a cross-site scripting vulnerability where widget titles were not properly escaped.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5732

https://core.trac.wordpress.org/changeset/33529

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.7.9
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.8.9
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 3.9.7
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.0.6
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.1.6
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2
WordPress 4.2.3

Insufficient permission check on draft creation

Skrevet den 4. august 201518. oktober 2025 af i WordPress

It is possible for a user with Subscriber permissions to create a draft through Quick Draft.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.7.6
WordPress 3.7.7
WordPress 3.7.8
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.8.8
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 3.9.4
WordPress 3.9.5
WordPress 3.9.6
WordPress 4.0
WordPress 4.0.1
WordPress 4.0.2
WordPress 4.0.3
WordPress 4.0.4
WordPress 4.0.5
WordPress 4.1
WordPress 4.1.1
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.1.4
WordPress 4.1.5
WordPress 4.2
WordPress 4.2.1
WordPress 4.2.2

XSS through incomplete comment sanitizing

Skrevet den 28. april 201522. august 2024 af i WordPress

The WordPress team was made aware of a cross-site scripting vulnerability, which could enable commenters to compromise a site.

This vulnerability affects the following application versions:

WordPress 3.7.6
WordPress 3.7.7
WordPress 3.8.6
WordPress 3.8.7
WordPress 3.9.4
WordPress 3.9.5
WordPress 4.0.3
WordPress 4.1.2
WordPress 4.1.3
WordPress 4.2

SQL injection vulnerability through ordering

Skrevet den 22. april 201518. oktober 2025 af i WordPress

SQL injection vulnerability through ordering

This vulnerability affects the following application versions:

WordPress 2.5.1
WordPress 2.6.2
WordPress 2.6.3
WordPress 2.6.5
WordPress 2.7
WordPress 2.7.1
WordPress 2.8
WordPress 2.8.1
WordPress 2.8.2
WordPress 2.8.3
WordPress 2.8.4
WordPress 2.8.5
WordPress 2.8.6
WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 4.0
WordPress 4.0.1
WordPress 4.1
WordPress 4.1.1

File uploads with unsafe filenames

Skrevet den 22. april 201522. august 2024 af i WordPress

In WordPress 4.1 and higher, files with invalid or unsafe names could be uploaded.

This vulnerability affects the following application versions:

WordPress 4.1
WordPress 4.1.1

General XSS vulnerability

Skrevet den 22. april 201522. august 2024 af i WordPress

WordPress versions 4.1.1 and earlier are affected by a critical cross-site scripting vulnerability, which could enable anonymous users to compromise a site.

This vulnerability affects the following application versions:

WordPress 2.7
WordPress 2.7.1
WordPress 2.8
WordPress 2.8.1
WordPress 2.8.2
WordPress 2.8.3
WordPress 2.8.4
WordPress 2.8.5
WordPress 2.8.6
WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.7.5
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.8.5
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 3.9.3
WordPress 4.0
WordPress 4.0.1
WordPress 4.1
WordPress 4.1.1

Brute force attacks against CSRF tokens

Skrevet den 4. marts 201520. november 2024 af i WordPress

Adds protections against brute attacks against CSRF tokens.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.9
WordPress 3.9.1

Formatting url_cleaning

Skrevet den 4. marts 201522. august 2024 af i WordPress

Checking of bad protocols was not normalized.

http://core.trac.wordpress.org/changeset/17172/branches/3.0/wp-includes/formatting.php

This vulnerability affects the following application versions:

WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3

Media upload ID leaking

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

Restrict some post IDs when dealing with media uploading, which could leak some info (or attach media to a post the user doesn’t have privileges to).

http://core.trac.wordpress.org/changeset/21087/branches/3.3

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2

Authentication cookie forgery

Skrevet den 4. marts 201520. november 2024 af i WordPress

WordPress does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0166

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.8
WordPress 3.8.1

Code execution when processing widgets

Skrevet den 4. marts 201520. november 2024 af i WordPress

Fixes a possible but unlikely code execution when processing widgets.

This vulnerability affects the following application versions:

WordPress 3.9
WordPress 3.9.1

Unfiltered HTML comments

Skrevet den 4. marts 201522. august 2024 af i WordPress

Unfiltered HTML comments from a frame.

http://core.trac.wordpress.org/ticket/20812

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2

XSS via editable slug fields

Skrevet den 4. marts 201522. august 2024 af i WordPress

XSS via editable slug fields

http://codex.wordpress.org/Version_3.3.3
http://core.trac.wordpress.org/changeset/21083/branches/3.3

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2

Security hardening in allowed upload file types

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

Updated security restrictions around file uploads to mitigate the potential for cross-site scripting. The extensions .swf and .exe are no longer allowed by default, and .htm and .html are only allowed if the user has the ability to use unfiltered HTML.

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6

Remote code execution through unsafe data de-serialization

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

Block unsafe PHP de-serialization that could occur in limited situations and setups, which can lead to remote code execution.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4338

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6

Bookmark get_bookmarks SQL injection

Skrevet den 4. marts 201520. november 2024 af i WordPress

SQL injection in get_bookmarks()

http://core.trac.wordpress.org/changeset/18355

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3

Information disclosure through media uploader

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1) draft posts or (2) private posts via a modified attachment_id parameter.

http://www.cvedetails.com/cve/CVE-2011-0701/

http://core.trac.wordpress.org/changeset/17393

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4

Installing/Updating Plugins/Themes XSS

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) uploads of media files, (2) editing of media files, (3) installation of plugins, (4) updates to plugins, (5) installation of themes, or (6) updates to themes.

http://www.cvedetails.com/cve/CVE-2013-2201/

http://core.trac.wordpress.org/changeset/24475/branches/3.5

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1

Hash collision for old passwords

Skrevet den 4. marts 201522. august 2024 af i WordPress

An extremely unlikely hash collision could allow a user’s account to be compromised, that also required that they haven’t logged in since 2008

See https://wordpress.org/news/2014/11/wordpress-4-0-1/

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 4.0

Privilege escalation in comments

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

SQL injection vulnerability in the do_trackbacks function in wp-includes/comment.php in WordPress before 3.0.2 allows remote authenticated users to execute arbitrary SQL commands via the Send Trackbacks field.

http://www.cvedetails.com/cve/CVE-2010-4257/

http://core.trac.wordpress.org/changeset/16625
http://core.trac.wordpress.org/changeset/16638

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1

XSS in update and template management

Skrevet den 4. marts 201522. august 2024 af i WordPress

Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

http://www.cvedetails.com/cve/CVE-2011-4956/

http://core.trac.wordpress.org/changeset/17583

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.1

DoS when checking large passwords

Skrevet den 4. marts 201520. november 2024 af i WordPress

An issue could lead to a denial of service when passwords are checked.

See https://wordpress.org/news/2014/11/wordpress-4-0-1/

This vulnerability affects the following application versions:

WordPress 2.5
WordPress 2.5.1
WordPress 2.6
WordPress 2.6.1
WordPress 2.6.2
WordPress 2.6.3
WordPress 2.6.5
WordPress 2.7
WordPress 2.7.1
WordPress 2.8
WordPress 2.8.1
WordPress 2.8.2
WordPress 2.8.3
WordPress 2.8.4
WordPress 2.8.5
WordPress 2.8.6
WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 4.0

oEmbed XML External Entity Injection

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

http://www.cvedetails.com/cve/CVE-2013-2202/

http://core.trac.wordpress.org/changeset/24471/branches/3.5

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1

Contributor-level users to improperly publish posts

Skrevet den 4. marts 201520. november 2024 af i WordPress

a vulnerability that allows Contributor-level users to improperly publish posts.

http://core.trac.wordpress.org/changeset/17710

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.1
WordPress 3.1.1

Invalidation of password reset tokens

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

WordPress now invalidates the links in a password reset email if the user remembers their password, logs in, and changes their email address.

See https://wordpress.org/news/2014/11/wordpress-4-0-1/

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 4.0

Access restriction bypass in xmlrpc.php

Skrevet den 4. marts 201520. november 2024 af i WordPress

The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote authenticated users to bypass intended access restrictions, and publish, edit, or delete posts, by leveraging the Author or Contributor role.

http://www.cvedetails.com/cve/CVE-2010-5106/

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2

XSS in redirects

Skrevet den 4. marts 201522. august 2024 af i WordPress

wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

http://www.cvedetails.com/cve/CVE-2012-2404/

http://core.trac.wordpress.org/changeset/20486/branches/3.3

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1

XSS vulnerability in commenting system

Skrevet den 4. marts 201522. august 2024 af i WordPress

WordPress is affected by a critical cross-site scripting vulnerability, which could enable anonymous users to compromise a site.

An attacker could exploit the vulnerability by entering carefully crafted comments, containing program code, on WordPress blog posts and pages. Under default settings comments can be entered by anyone without authentication (login).

Program code injected in comments would be inadvertedly executed in the blog administrator’s web browser when they view the comment. The rogue code could then perform administrative operations by covertly taking over the administror account.

Such operations – demonstrated by our proof of concept exploits – include creating a new administrator account (with a known password), changing the current administrator password, and in the most serious case, executing attacker-supplied PHP code on the server. This grants the attacker operating system level access on the server hosting WordPress.

See https://wordpress.org/news/2014/11/wordpress-4-0-1/ and http://klikki.fi/adv/wordpress.html

This vulnerability affects the following application versions:

WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 4.0

Formatting segfault

Skrevet den 4. marts 201522. august 2024 af i WordPress

With the right parameters make_clickable produces segmentation faults.

http://core.trac.wordpress.org/ticket/16892

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1

Denial of Service via Post Password Cookies

Skrevet den 4. marts 201522. august 2024 af i WordPress

wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (CPU consumption) via a crafted value of a certain wp-postpass cookie.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2173

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1

Validation of EXIF data

Skrevet den 4. marts 201522. august 2024 af i WordPress

Better validation of EXIF data is extracted from uploaded photos.

See https://wordpress.org/news/2014/11/wordpress-4-0-1/

This vulnerability affects the following application versions:

WordPress 2.5
WordPress 2.5.1
WordPress 2.6
WordPress 2.6.1
WordPress 2.6.2
WordPress 2.6.3
WordPress 2.6.5
WordPress 2.7
WordPress 2.7.1
WordPress 2.8
WordPress 2.8.1
WordPress 2.8.2
WordPress 2.8.3
WordPress 2.8.4
WordPress 2.8.5
WordPress 2.8.6
WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 4.0

wp_upload_dir() shows paths

Skrevet den 4. marts 201522. august 2024 af i WordPress

A more generic message for wp_upload_dir()

http://core.trac.wordpress.org/ticket/21796

This vulnerability affects the following application versions:

WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1

Excerpt mode shows post even if user is not allowed to

Skrevet den 4. marts 201522. august 2024 af i WordPress

In excerpt view, show the excerpt only if the user can read_post.

http://core.trac.wordpress.org/changeset/21086/branches/3.3

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2

Server-side request forgery attacks

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

Additional protections for server-side request forgery attacks when WordPress makes HTTP requests.

See https://wordpress.org/news/2014/11/wordpress-4-0-1/

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 4.0

Check in check_admin_referer

Skrevet den 4. marts 201520. november 2024 af i WordPress

Harden check_admin_referer() when called without arguments, which plugins should avoid.

http://core.trac.wordpress.org/changeset/17387

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4

HTML filtering on comment text

Skrevet den 4. marts 201522. august 2024 af i WordPress

Force HTML filtering on comment text in the admin.

http://core.trac.wordpress.org/changeset/17400

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4

CSRF in password change form

Skrevet den 4. marts 201520. november 2024 af i WordPress

A cross-site request forgery that could be used to trick a user into changing their password.

See https://wordpress.org/news/2014/11/wordpress-4-0-1/

This vulnerability affects the following application versions:

WordPress 3.7.4
WordPress 3.8.4
WordPress 3.9.2
WordPress 4.0

Prevent author impersonation in creating new post

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

Prevent a user with an Author role, using a specially crafted request, from being able to create a post “written by” another user.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4340

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6

Media upload nonce check

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

Security hardening to media uploads

http://core.trac.wordpress.org/changeset/17569

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.1

Full Path Disclosure in file upload

Skrevet den 4. marts 201522. august 2024 af i WordPress

WordPress before 3.5.2, when the uploads directory forbids write access, allows remote attackers to obtain sensitive information via an invalid upload request, which reveals the absolute path in an XMLHttpRequest error message.

Full Path Disclosure (FPD) during File Upload.

http://www.cvedetails.com/cve/CVE-2013-2203/

http://core.trac.wordpress.org/changeset/24464/branches/3.5

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1

XSS vulnerability in style filter

Skrevet den 4. marts 201522. august 2024 af i WordPress

A cross-site scripting issue that a contributor or author could use to compromise a site.

See https://wordpress.org/news/2014/11/wordpress-4-0-1/

This vulnerability affects the following application versions:

WordPress 2.8.1
WordPress 2.8.2
WordPress 2.8.3
WordPress 2.8.4
WordPress 2.8.5
WordPress 2.8.6
WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 4.0

Privilege escalation in deactivating plugins

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors.

http://www.cvedetails.com/cve/CVE-2012-2402/

http://core.trac.wordpress.org/changeset/20526/branches/3.3

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1

Taxonomy get_terms SQL injection

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

SQL injection in get_terms.

http://www.cvedetails.com/cve/CVE-2011-3130/

http://core.trac.wordpress.org/changeset/21759

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1

XSS in get_pagenum_link

Skrevet den 4. marts 201522. august 2024 af i WordPress

xss in get_pagenum_link()

http://core.trac.wordpress.org/ticket/14556

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2

XSS vulnerability in Press This error handling

Skrevet den 4. marts 201522. august 2024 af i WordPress

A cross-site scripting issue that a contributor or author could use to compromise a site.

See https://wordpress.org/news/2014/11/wordpress-4-0-1/

This vulnerability affects the following application versions:

WordPress 2.9
WordPress 2.9.1
WordPress 2.9.2
WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.7.4
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.8.4
WordPress 3.9
WordPress 3.9.1
WordPress 3.9.2
WordPress 4.0

Network plugins only through the network admin

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

Only allow operations on network plugins through the network admin.

http://core.trac.wordpress.org/ticket/21187

This vulnerability affects the following application versions:

WordPress 3.4
WordPress 3.4.1

XSS in request_filesystem_credentials() and when deleting a plugin

Skrevet den 4. marts 201522. august 2024 af i WordPress

XSS fixes in request_filesystem_credentials() and when deleting a plugin.

http://core.trac.wordpress.org/changeset/16373
http://core.trac.wordpress.org/changeset/16367

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1

Unfiltered HTML in Multisite

Skrevet den 4. marts 201522. august 2024 af i WordPress

The map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when the multisite feature is enabled, does not properly assign the unfiltered_html capability, which allows remote authenticated users to bypass intended access restrictions and conduct cross-site scripting (XSS) attacks by leveraging the Administrator or Editor role and composing crafted text.

http://www.cvedetails.com/cve/CVE-2012-3383/

http://core.trac.wordpress.org/changeset/21774

This vulnerability affects the following application versions:

WordPress 3.4
WordPress 3.4.1

Full Path Disclosure in file upload

Skrevet den 4. marts 201522. august 2024 af i WordPress

Full Path Disclosure (FPD) during File Upload.

http://www.cvedetails.com/cve/CVE-2013-2203/

http://core.trac.wordpress.org/changeset/24464/branches/3.5

This vulnerability affects the following application versions:

WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3

Denial of Service in XML-RPC processing

Skrevet den 4. marts 201522. august 2024 af i WordPress

The XML processing of XML-RPC requests is vulnerable to an XML entity expansion attack and other related XML payload attacks which can cause CPU and memory exhaustion and the site’s database to reach the maximum number of open connections. Any of these may lead to the site becoming unavailable or unresponsive (denial of service).

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.9
WordPress 3.9.1

XSS in post_status, comment_status and ping_status

Skrevet den 4. marts 201522. august 2024 af i WordPress

Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer additional sanitization to various fields. Affects users of the Author or Contributor role.

http://www.cvedetails.com/cve/CVE-2011-0700/
http://core.trac.wordpress.org/changeset/17406
http://core.trac.wordpress.org/changeset/17397
http://core.trac.wordpress.org/changeset/17412

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4

XSS in wp-includes/class-wp-embed.php maybe_make_link

Skrevet den 4. marts 201522. august 2024 af i WordPress

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post.

http://www.cvedetails.com/cve/CVE-2013-0236/

http://core.trac.wordpress.org/changeset/23322/branches/3.5

This vulnerability affects the following application versions:

WordPress 3.5

XML entity attack in GetID3 module

Skrevet den 4. marts 201522. august 2024 af i WordPress

Information disclosure was possible via XML entity attacks in the external GetID3 library.

This vulnerability affects the following application versions:

WordPress 3.6
WordPress 3.6.1
WordPress 3.7
WordPress 3.7.1
WordPress 3.7.2
WordPress 3.7.3
WordPress 3.8
WordPress 3.8.1
WordPress 3.8.2
WordPress 3.8.3
WordPress 3.9
WordPress 3.9.1

XSS vulnerabilities in the KSES library

Skrevet den 4. marts 201522. august 2024 af i WordPress

Multiple XSS vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the & (ampersand) character, (2) the case of an attribute name, (3) a padded entity, and (4) an entity that is not in normalized form.

http://www.cvedetails.com/cve/CVE-2010-4536/
http://core.trac.wordpress.org/changeset/17172

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3

Attachment disclosure in wp-includes/post.php

Skrevet den 4. marts 201520. november 2024 af i WordPress

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.

http://www.cvedetails.com/cve/CVE-2011-3128/

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4

XSS in making URLs clickable

Skrevet den 4. marts 201522. august 2024 af i WordPress

wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

http://www.cvedetails.com/cve/CVE-2011-4957/

http://core.trac.wordpress.org/changeset/20493/branches/3.3

This vulnerability affects the following application versions:

WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1

Link/redirect injection

Skrevet den 4. marts 201518. oktober 2025 af i WordPress

Fix insufficient input validation that could result in redirecting or leading a user to another website.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4339

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4
WordPress 3.0.5
WordPress 3.0.6
WordPress 3.1
WordPress 3.1.1
WordPress 3.1.2
WordPress 3.1.3
WordPress 3.1.4
WordPress 3.2
WordPress 3.2.1
WordPress 3.3
WordPress 3.3.1
WordPress 3.3.2
WordPress 3.3.3
WordPress 3.4
WordPress 3.4.1
WordPress 3.4.2
WordPress 3.5
WordPress 3.5.1
WordPress 3.5.2
WordPress 3.6

Access restriction bypass in class-wp-atom-server.php

Skrevet den 4. marts 201520. november 2024 af i WordPress

The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows remote authenticated users to bypass intended access restrictions and publish new posts by leveraging the Contributor role and using the Atom Publishing Protocol (aka AtomPub) feature.

http://www.cvedetails.com/cve/CVE-2012-4421/

core.trac.wordpress.org/changeset/21744

This vulnerability affects the following application versions:

WordPress 3.4
WordPress 3.4.1