wordpress -- multiple vulnerabilities

secunia reports: The security issue is caused due to the wpcheckfiletype function in /wp-includes/functions.php improperly validating uploaded files. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script with multiple extensions. Successful exploitation of this...

WordPress <= 2.8.5 - XSS

Because of this vulnerability in wp-admin/press-this.php, authenticated users can inject arbitrary web script or HTML via the "s" parameter. Solution Update WordPress...

WordPress 'press-this.php'多个跨站脚本漏洞

BUGTRAQ ID: 30238 CNCAN ID：CNCAN-2008071709 WordPress是一款流行的博客应用程序。 WordPress 'press-this.php'存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是'press-this.php'对多个字段缺少过滤，构建恶意脚本代码作为参数数据，并诱使用户访问，可导致恶意脚本代码在目标浏览器中执行，泄漏敏感信息。 WordPress WordPress 2.5.1 WordPress WordPress 2.3.3 WordPress WordPress 2.3.2 WordPress...

WordPress 2.x < 2.6 'press-this.php' XSS

Binary data 4587.prm...