'

漏洞组件 — WordPress

漏洞详情：
WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL 数据库的服务器上架设自己的网志。也可以把 WordPress 当作一个内容管理系统（CMS）来使用。WordPress 是一个免费的开源项目，在GNU通用公共许可证下授权发布。 WordPress 被认为是Michel Valdrighi所开发的网志平台b2 cafelog的正式继承者。“WordPress”这个名字出自 Christine Selleck 的主意，他是主要开发者Matt Mullenweg的朋友。

相关漏洞

SSV ID 漏洞名称
SSV-99839 WordPress-XStore-Core-Plugin-SQL-Injection(CVE-2024-33551)
SSV-99530 Wordpress 存储型XSS漏洞（CVE-2022-21662）
SSV-99516 Wordpress 插件Tatsu builder 未授权RCE漏洞（CVE-2021-25094）
SSV-99431 wordpress SQL注入漏洞（CVE-2022–21661）
SSV-99235 wordpress 5.7 授权XXE漏洞（CVE-2021-29447）
SSV-99166 WordPress BuddyPress插件远程代码执行漏洞
SSV-99153 WordPress The Plus Addons for Elementor插件身份验证绕过漏洞（CVE-2021-24175）
SSV-99077 wordpress wp-file-manager插件远程代码执行漏洞（CVE-2020-25213）
SSV-99070 WordPress SMTP 插件任意密码修改 0 Day漏洞
SSV-98247 Wordpress IMPress for IDX Broker 低权限xss漏洞
SSV-98098 wordpress 查看未经身份验证的文章(CVE-2019-17671)
SSV-98052 wordpress 5.2.2 安装处任意文件读取
SSV-98004 WordPress 5.x 某页面存在暴力破解漏洞
SSV-97871 Social Warfare XSS and RCE Vulnerabilities and Attack Data
SSV-97857 WordPress 5.1 CSRF to Remote Code Execution
SSV-97817 WordPress 5.0.0 Remote Code Execution
SSV-97751 WordPress Privilege Escalation through Post Types
SSV-97750 Stored XSS on WordPress.org
SSV-97500 WordPress 插件Dreamsmiths v0.0.1 任意文件下载漏洞
SSV-97378 WordPress File Delete to Code Execution
SSV-97249 WordPress Plugin File Upload 4.3.3 - Stored Cross-Site Scripting (PoC)
SSV-97129 WordPress Core - 'load-scripts.php' Denial of Service(CVE-2018-6389)
SSV-96851 Wordpress SQLi — PoC
SSV-96850 Wordpress <= 4.8.2 SQL Injection POC
SSV-96790 Disclosure: WordPress WPDB SQL Injection - Technical
SSV-96376 Wordpress SQLi
SSV-96338 wordpress plugin updraftplus ssrf
SSV-96337 wordpress plugin updraftplus 任意文件上传
SSV-96269 WP Statistics Authenticated XSS Vulnerability
SSV-96263 WP Statistics SQL Injection vulnerability
SSV-93078 WordPress Core <= 4.7.4 Potential Unauthorized Password Reset
SSV-93077 WordPress Core 4.6 - Unauthenticated Remote Code Execution
SSV-93056 WordPress Plugin WA Form Builder SQL Injection
SSV-93055 WordPress Plugin Delete All Comments Arbitrary File Upload
SSV-93054 WordPress Plugin WP Vault Local File Inclusion
SSV-93053 WordPress Plugin Podlove Podcast Publisher Cross Site Scripting and SQL Injection Vulnerabilities
SSV-93052 WordPress Plugin All In One WP Security & Firewall Cross-Site Scripting
SSV-93051 WordPress Plugin Quiz And Survey Master (Formerly Quiz Master Next) Multiple Vulnerabilities
SSV-93050 CSRF vulnerability in Multisite Post Duplicator could allow an attacker to do almost anything an admin user can do (WordPress plugin)
SSV-93049 Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerability in Twitter Cards Meta
SSV-93048 Authenticated Persistent Cross-Site Scripting (XSS) Vulnerability in wpDataTables Lite
SSV-93047 WP Support Plus Responsive Ticket System 7.1.3 – WordPress Plugin – Sql Injection
SSV-93046 WordPress Plugin Social Share Buttons-Social Pug Cross-Site Scripting
SSV-93045 WordPress Plugin Nelio AB Testing Server-Side Request Forgery (SSRF)
SSV-92917 Wordpress Plugin Firewall 2 CSRF/储存型XSS漏洞
SSV-92845 WordPress Core before 4.7 Stored XSS
SSV-92800 Wordpress Plugin Membership Simplified 1.58 - 任意文件下载
SSV-92796 Wordpress Plugin Photo Gallery v3.0 - 任意文件下载
SSV-92753 WordPress audio playlist functionality is affected by Cross-Site Scripting
SSV-92735 WordPress Plugin Mail Masta 1.0 - SQL Injection
SSV-92732 Wordpress < 4.7.1 - Username Enumeration (CVE-2017-5487)
SSV-92727 WordPress 插件 NextGEN Gallery SQL 注入漏洞
SSV-92680 Wordpress 插件cmw-speakers speaker_details.php 参数id SQL注入漏洞
SSV-92637 WordPress REST API 内容注入漏洞
SSV-92618 WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 -特权提升
SSV-92589 wordpress 插件FancyBox admin-head.php 物理路径泄露漏洞
SSV-92572 WordPress functions.php 主题文件后门漏洞
SSV-92566 Wordpress Plugin Single Personal Message 1.0.3 SQL 注入漏洞
SSV-92565 Wordpress Plugin Olimometer 2.56 - SQL Injection
SSV-92549 Wordpress Plugin Answer My Question 1.3 - SQL Injection
SSV-92485 WordPress Plugin KBoard 2.7 board.php 参数uid SQL注入漏洞
SSV-92459 Wordpress <= 4.6.1 使用语言文件任意代码执行漏洞
SSV-92458 Wordpress <= 4.6.1 Stored XSS Via Theme File
SSV-92445 WordPress Plugin Image Export 本地文件包含漏洞
SSV-92406 WordPress RB Agency Plugin 2.4.7 - 本地文件包含
SSV-92390 Wordpress 的 timthumb-config.php任意文件下载
SSV-92383 WordPress CYSTEME Finder插件 任意文件泄露+上传漏洞
SSV-92372 WordPress Vertical Gallery插件 任意文件上传漏洞
SSV-92371 WordPress Zero Spam <= 2.1.1 - 未授权盲注
SSV-92370 WordPress Catpro Gallery插件 任意文件上传漏洞
SSV-92365 WordPress Bliss Gallery插件 任意文件上传漏洞
SSV-92353 Wordpress Multi Themes 任意文件下载漏洞
SSV-92350 WordPress Bonkersbeat-theme Arbitrary File Download Vulnerability
SSV-92349 WordPress 3.6-4.5.2 Authenticated Revision History Information Disclosure
SSV-92346 WordPress Mail Masta Plugin 1.0 - 本地文件包含
SSV-92344 WordPress 4.5 admin-ajax.php Path traversal & DoS
SSV-92336 WordPress <4.5 SSRF
SSV-92293 wordpress force force-download.php 参数file 任意文件下载漏洞
SSV-92284 wordpress-"Add From Server"插件CSRF
SSV-92270 Wordpress force download Arbitrary File Download
SSV-92262 WordPress theme ypo-theme Arbitrary File Download Vulnerability
SSV-92231 WordPress WP Live Chat Support(6.2.03) 插件存储型 XSS
SSV-92097 WordPress WP-DownloadManager Plugin 1.68.1 任意文件上传漏洞
SSV-92083 WordPress-Mailpress action.php 远程代码执行漏洞
SSV-92075 WordPress Lazy Content Slider 插件 CSRF漏洞
SSV-92033 WordPress Real 3D Flipbook 插件多个漏洞打包
SSV-91956 WordPress Like Dislike Counter 1.2.3 插件 SQL注入漏洞
SSV-91941 WordPress Mobile Detector <=3.5 resize.php src参数本地文件包含漏洞
SSV-91878 Wordpress Ocim MP3 Plugin ocim-mp3/source/pages.php id参数SQL注入漏洞
SSV-91835 WordPress Filedownload Plugin 0.1 任意文件下载
SSV-91834 WordPress TheCartPress Plugin 1.1.1 本地/远程文件包含漏洞
SSV-91797 WordPress WP Mobile Detector Plugin 3.5文件上传漏洞
SSV-91782 WordPress Mobile Detector file_get_contents 函数远程文件读取
SSV-91770 WordPress OPS Old Post Spinner 插件任意文件包含漏洞
SSV-91727 WordPress Ninja Forms Unauthenticated File Upload
SSV-91692 WordPress DB Backup Plugin 任意文件下载
SSV-91689 WordPress Advanced Video Plugin 1.0 本地文件包含漏洞
SSV-91680 WordPress Kento Post View Counter Plugin 2.8 - CSRF/XSS
SSV-91671 WordPress Brafton 3.3.10 反射型 xss
SSV-91627 WordPress Ghost Plugin 0.5.5 未授权下载 ghost 文件
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. English