Show filters
472 Total Results
Displaying 111-120 of 472
Sort by:
Attacker Value
Unknown
CVE-2019-17670
Disclosure Date: October 17, 2019 (last updated November 27, 2024)
WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because Windows paths are mishandled during certain validation of relative URLs.
0
Attacker Value
Unknown
CVE-2019-17669
Disclosure Date: October 17, 2019 (last updated November 27, 2024)
WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series of hex characters.
0
Attacker Value
Unknown
CVE-2019-17674
Disclosure Date: October 17, 2019 (last updated November 27, 2024)
WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.
0
Attacker Value
Unknown
CVE-2019-17671
Disclosure Date: October 17, 2019 (last updated November 27, 2024)
In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.
0
Attacker Value
Unknown
CVE-2019-17672
Disclosure Date: October 17, 2019 (last updated November 27, 2024)
WordPress before 5.2.4 is vulnerable to a stored XSS attack to inject JavaScript into STYLE elements.
0
Attacker Value
Unknown
CVE-2019-17675
Disclosure Date: October 17, 2019 (last updated November 27, 2024)
WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.
0
Attacker Value
Unknown
CVE-2019-17673
Disclosure Date: October 17, 2019 (last updated November 27, 2024)
WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.
0
Attacker Value
Unknown
CVE-2019-16218
Disclosure Date: September 11, 2019 (last updated November 27, 2024)
WordPress before 5.2.3 allows XSS in stored comments.
0
Attacker Value
Unknown
CVE-2019-16217
Disclosure Date: September 11, 2019 (last updated November 27, 2024)
WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled.
0
Attacker Value
Unknown
CVE-2019-16221
Disclosure Date: September 11, 2019 (last updated November 27, 2024)
WordPress before 5.2.3 allows reflected XSS in the dashboard.
0
