Vulnerabilidades de WordPress.org WordPress (CVE)

Registros CVE publicados para WordPress.org WordPress, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

5 resultados
4.3Media
CVE-2023-39999

WordPress < 6.3.2 is vulnerable to Broken Access Control

WordPress.org WordPress

Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6…

1.2%EPSS
5.3Media
CVE-2022-43504
WordPress.org WordPress

Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature. The developer also provides new patched re…

1.5%EPSS
6.1Media
CVE-2022-43500
WordPress.org WordPress

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.

6.1Media
CVE-2022-43497
WordPress.org WordPress

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.

1.3%EPSS