Wordpress Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wordpress/ Sun, 26 Feb 2023 09:11:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Wordpress Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wordpress/ 32 32 CVE-2008-7216 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7216/ Sun, 26 Feb 2023 09:11:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7216/ Peter’s Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.

The post CVE-2008-7216 appeared first on CVE Vulnerability.

]]> Peter’s Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.

The post CVE-2008-7216 appeared first on CVE Vulnerability.

]]> CVE-2008-7175 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7175/ Sun, 26 Feb 2023 09:11:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7175/ Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.

The post CVE-2008-7175 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.

The post CVE-2008-7175 appeared first on CVE Vulnerability.

]]> CVE-2008-5752 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5752/ Sun, 26 Feb 2023 09:11:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5752/ Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information.

The post CVE-2008-5752 appeared first on CVE Vulnerability.

]]> Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information.

The post CVE-2008-5752 appeared first on CVE Vulnerability.

]]> CVE-2008-2034 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2034/ Sun, 26 Feb 2023 09:09:19 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2034/ SQL injection vulnerability in wp-download_monitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-2034 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in wp-download_monitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-2034 appeared first on CVE Vulnerability.

]]> CVE-2008-0939 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0939/ Sun, 26 Feb 2023 09:08:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0939/ Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the photo parameter to index.php, used by the wppa_photo_name function; or (2) the album parameter to index.php, used by the wppa_album_name function. NOTE: some of these details are […]

The post CVE-2008-0939 appeared first on CVE Vulnerability.

]]> Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via (1) the photo parameter to index.php, used by the wppa_photo_name function; or (2) the album parameter to index.php, used by the wppa_album_name function. NOTE: some of these details are obtained from third party information.

The post CVE-2008-0939 appeared first on CVE Vulnerability.

]]> CVE-2008-0845 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0845/ Sun, 26 Feb 2023 09:08:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0845/ SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter.

The post CVE-2008-0845 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter.

The post CVE-2008-0845 appeared first on CVE Vulnerability.

]]> CVE-2008-0491 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0491/ Sun, 26 Feb 2023 09:08:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0491/ SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter.

The post CVE-2008-0491 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter.

The post CVE-2008-0491 appeared first on CVE Vulnerability.

]]> CVE-2008-0507 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0507/ Sun, 26 Feb 2023 09:08:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0507/ SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

The post CVE-2008-0507 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

The post CVE-2008-0507 appeared first on CVE Vulnerability.

]]> CVE-2008-0508 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0508/ Sun, 26 Feb 2023 09:08:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0508/ Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean’s Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure (aka dean_pm_config[oldstructure]) configuration setting as administrators via the old_struct parameter in a deans_permalinks_migration.php action to wp-admin/options-general.php, as demonstrated by placing an XSS sequence in this setting.

The post CVE-2008-0508 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean’s Permalinks Migration 1.0 plugin for WordPress allows remote attackers to modify the oldstructure (aka dean_pm_config[oldstructure]) configuration setting as administrators via the old_struct parameter in a deans_permalinks_migration.php action to wp-admin/options-general.php, as demonstrated by placing an XSS sequence in this setting.

The post CVE-2008-0508 appeared first on CVE Vulnerability.

]]> CVE-2008-0203 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0203/ Sun, 26 Feb 2023 09:08:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0203/ Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cryptwidth, (2) cryptheight, (3) bgimg, (4) charR, (5) charG, (6) charB, (7) charclear, (8) tfont, (9) charel, (10) charelc, (11) charelv, (12) charnbmin, (13) charnbmax, (14) […]

The post CVE-2008-0203 appeared first on CVE Vulnerability.

]]> Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cryptwidth, (2) cryptheight, (3) bgimg, (4) charR, (5) charG, (6) charB, (7) charclear, (8) tfont, (9) charel, (10) charelc, (11) charelv, (12) charnbmin, (13) charnbmax, (14) charspace, (15) charsizemin, (16) charsizemax, (17) charanglemax, (18) noisepxmin, (19) noisepxmax, (20) noiselinemin, (21) noiselinemax, (22) nbcirclemin, (23) nbcirclemax, or (24) brushsize parameter to wp-admin/options-general.php.

The post CVE-2008-0203 appeared first on CVE Vulnerability.

]]>