WM
Product
Wordpress MU
10
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Wordpress MU to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-2432 | – | Jul 10 | WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an… Affected: through 2.7; 1.1; 1.1.1; 1.2; 1.2.1; 1.2.2; +15 more |
| CVE-2009-2336 | – | Jul 10 | The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which… Affected: before 2.8.1 |
| CVE-2009-2335 | – | Jul 10 | WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to… Affected: before 2.8.1 |
| CVE-2009-2334 | – | Jul 10 | wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers… Affected: through 2.7; 1.1; 1.1.1; 1.2; 1.2.1; 1.2.2; +15 more |
| CVE-2009-1030 | – | Mar 20 | Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject… Affected: through 2.6; 1.0; 1.0; 1.0; 1.0; 1.0; +20 more |
| CVE-2008-5695 | – | Dec 19 | wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated… Affected: before 1.3.2 |
| CVE-2008-4671 | – | Oct 22 | Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s… Affected: 1.0; 1.2.2; 1.2.3; 1.3; 1.3.1 |
| CVE-2007-4544 | – | Aug 27 | Cross-site scripting (XSS) vulnerability in wp-newblog.php in WordPress multi-user (MU) 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the… Affected: through 1.0 |
| CVE-2007-3543 | – | Jul 3 | Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making… Affected: through 1.2.2 |
| CVE-2007-3544 | – | Jul 3 | Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload and execute… Affected: through 1.2.2 |
Showing 10