Wordpress

Wordpress

381 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2014-9039

  • EPSS 2.38%
  • Veröffentlicht 25.11.2014 23:59:10
  • Zuletzt bearbeitet 06.05.2026 22:30:45

wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message.

6.4

CVE-2014-9038

  • EPSS 3.77%
  • Veröffentlicht 25.11.2014 23:59:09
  • Zuletzt bearbeitet 06.05.2026 22:30:45

wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) attacks by referring to a 127.0.0.0/8 resource.

6.8

CVE-2014-9037

  • EPSS 2.57%
  • Veröffentlicht 25.11.2014 23:59:08
  • Zuletzt bearbeitet 06.05.2026 22:30:45

WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash.

4.3

CVE-2014-9036

  • EPSS 2.34%
  • Veröffentlicht 25.11.2014 23:59:07
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted Cascading Style Sheets (CSS) token sequence ...

4.3

CVE-2014-9035

  • EPSS 2.34%
  • Veröffentlicht 25.11.2014 23:59:06
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5

CVE-2014-9034

  • EPSS 82.7%
  • Veröffentlicht 25.11.2014 23:59:05
  • Zuletzt bearbeitet 06.05.2026 22:30:45

wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing,...

6.8

CVE-2014-9033

  • EPSS 1.96%
  • Veröffentlicht 25.11.2014 23:59:03
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote attackers to hijack the authentication of arbitrary users for requests that reset passwords.

4.3

CVE-2014-9032

  • EPSS 2.84%
  • Veröffentlicht 25.11.2014 23:59:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3

CVE-2014-9031

  • EPSS 4.98%
  • Veröffentlicht 25.11.2014 23:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitrary web script or HTML via crafted use of shortcode brackets in a text ...

7.5

CVE-2003-1599

Exploit
  • EPSS 3.08%
  • Veröffentlicht 27.10.2014 20:55:07
  • Zuletzt bearbeitet 06.05.2026 22:30:45

PHP remote file inclusion vulnerability in wp-links/links.all.php in WordPress 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the $abspath variable.