WordPress 1.2 - wp-login.php Multiple Cross-Site Scripting Vulnerabilities

WordPress 1.2 - wp-login.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11268/info It is reported that Wordpress is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize...

WordPress Core 1.2 - 'edit.php?s' Cross-Site Scripting

source: https://www.securityfocus.com/bid/11268/info It is reported that Wordpress is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. Wordpress 1.2 is reported vulnerable, however, other...

wordpress -- XSS in administration panel

Pages in the administration panel of Wordpress are vulnerable for XSS attacks...

WordPress < 2.8.1 Multiple Vulnerabilities

Binary data 5096.prm...

WordPress 2.x < 2.6 'press-this.php' XSS

Binary data 4587.prm...

WordPress 'blog.header.php' Multiple Parameter SQL Injection

The version of WordPress running on the remote host is affected by multiple SQL injection vulnerabilities. An attacker can exploit these flaws to execute arbitrary database queries resulting in the disclosure of sensitive information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: From...

WordPress < 0.72 RC1 Multiple Vulnerabilities

It is possible to make the remote host include php files hosted on a third-party server using the WordPress CGI suite that is installed which is also vulnerable to a SQL injection attack. An attacker may use this flaw to inject arbitrary PHP code into the remote host and gain a shell with the...