EUVD-2021-11663

Malware in sbrugna...

CVE-2011-1762

A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts. This may allow a user with 'Contributor-level' privileges to post as if they had 'publishposts' permission...

WordPress wp_ajax_replyto_comment ajax-actions.php wpHandleCommentSubmission comment.php Information Disclosure

The vulnerability of the wpajaxreplytocomment function in ajax-actions.php and the wpHandleCommentSubmission function in comment.php of the WordPress content management system is related to insufficient validation of the requests being executed. Exploiting this vulnerability could allow an attack...

UBUNTU-CVE-2019-16219

WordPress before 5.2.3 allows XSS in shortcode previews...

DEBIAN-CVE-2018-20153

In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS...