272 matches found
CVE-2017-14724
Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery...
CVE-2017-14724
Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery...
CVE-2017-14724
Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery...
CVE-2017-14724: Improper Neutralization of Input During Web Page Generation
Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery...
PT-2017-13653
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.8.2 Description The issue concerns cross-site scripting in oEmbed discovery. Recommendations For versions prior to 4.8.2, update to version 4.8.2 or later to resolve the issue...
wordpress -- multiple issues
wordpress developers report: Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL. Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name. Before versi...
WordPress Cross-Site Scripting Vulnerability (CNVD-2017-34852)
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability in oEmbed Discovery. A remote attacker can exploit this...
WordPress <=4.8.1 - Cross-Site Scripting (XSS) vulnerability (oEmbed)
Cross-Site Scripting XSS vulnerability found by xknown of the WordPress Security Team in WordPress oEmbed version 4.8.1 and earlier versions. Solution Update the WordPress to the latest available version at least 4.8.2...
Discourse: Stored XSS in posts because of absence of oembed variables values escaping
Hello! Steps to reproduce: 1. Paste this payload URL in the post: http://89.223.28.48/oembedvideo.html?uncache 2. Save the post and you will see the XSS will fire. F151922 The vulnerability exists because of absence of oembed variables values escaping. There is the oembed link in the payload page...
WordPress Multiple Vulnerabilities (Jul 2016) - Linux
WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...
WordPress < 4.5.3 Multiple Vulnerabilities
Binary data 9388.prm...
CVE-2016-5836
The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors...
CVE-2016-5836
The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors...
DEBIAN-CVE-2016-5836
The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors...
CVE-2016-5836
The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors...
Design/Logic Flaw
The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors...
UBUNTU-CVE-2016-5836
The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via unspecified vectors...
CVE-2016-5836
CVE-2016-5836 affects WordPress prior to 4.5.3 where the oEmbed implementation can be abused to cause a denial of service. In the provided documents, the issue is documented as a DoS via unspecified vectors, with CVSSv2 base 5.0 (MEDIUM) and CVSSv3 base 7.5 (HIGH). A practical remediation is upgr...