Wordpress Mu@1.3 Security Vulnerabilities and Issues — Wordpress Mu@1.3 CVE List

Lucene search

WordpressWordpress Mu1.3

4 matches found

CVE•added 2009/07/10 9:0 p.m.•87 views

CVE-2009-2334

wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstra...

4.9CVSS6.1AI score0.16387EPSS

CVE•added 2009/03/20 12:30 a.m.•60 views

CVE-2009-1030

Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header.

4.3CVSS5.5AI score0.01038EPSS

CVE•added 2009/07/10 9:0 p.m.•49 views

CVE-2009-2432

WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message.

5CVSS6.1AI score0.01072EPSS

CVE•added 2008/10/22 10:30 a.m.•39 views

CVE-2008-4671

Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.

4.3CVSS5.6AI score0.00735EPSS