Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (4)
| Vulnerability |
Summary |
Aliases |
|
VCID-5pv4-ff9z-r3hp
|
WordPress is vulnerable to SQL injection, information disclosure, and
cross-site scripting attacks.
|
CVE-2006-6808
|
|
VCID-7fgf-juyy-fufk
|
Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly handled when WordPress generates a new link to verify the request.
|
CVE-2007-0106
|
|
VCID-mxvk-932h-c7dp
|
WordPress is vulnerable to SQL injection, information disclosure, and
cross-site scripting attacks.
|
CVE-2007-0109
|
|
VCID-yqyp-a879-nfda
|
WordPress is vulnerable to SQL injection, information disclosure, and
cross-site scripting attacks.
|
CVE-2007-0107
|