Vulnerability Name CVE Severity
WildFly Application Server Uncontrolled Resource Consumption Vulnerability (CVE-2016-9589)
WooCommerce Payments Authentication Bypass and Privilege Escalation
WooFramework shortcode exploit
WordPress 'admin-ajax.php' SQL Injection Vulnerability (2.1.3)
WordPress 'blog.header.php' Multiple SQL Injection Vulnerabilities (0.6.2 - 0.71)
WordPress 'cat' Parameter SQL Injection Vulnerability (1.5 - 1.5.1.1)
WordPress 'comment_post_ID' Parameter SQL Injection Vulnerability (3.0.4)
WordPress 'edit.php' Cross-Site Scripting Vulnerability (1.5)
WordPress 'get_edit_post_link()' and 'get_edit_comment_link()' Multiple Eavesdropping Vulnerabilities (0.6.2 - 2.6)
WordPress 'index.php' Cross-Site Scripting Vulnerability (1.5)
WordPress 'paged' Parameter SQL Injection Vulnerability (2.0.2 - 2.0.5)
WordPress 'post.php' Cross-Site Scripting Vulnerability (1.5)
WordPress 'press-this.php' Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.5.1)
WordPress 'press-this.php' Remote Security Bypass Vulnerability (0.7 - 3.1.1)
WordPress 'swfupload.swf' Cross-Site Scripting Vulnerability (2.5 - 3.3.1)
WordPress 'templates.php' Cross-Site Scripting Vulnerability (0.6.2 - 2.1)
WordPress 'wp-admin/admin.php' Module Configuration Security Bypass Vulnerability (0.6.2 - 2.8)
WordPress 'wp-admin/options.php' Remote Code Execution Vulnerability (0.6.2 - 2.3.2)
WordPress 'wp-db.php' Character Set SQL Injection Vulnerability (2.0 - 2.3.1)
WordPress 'wp-login.php' HTTP Response Splitting Vulnerability (1.2)
WordPress 'wp-register.php' Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.0.1)
WordPress 'wp-trackback.php' SQL Injection Vulnerability (1.5)
WordPress 'xmlrpc.php' Remote Security Bypass Vulnerability (3.0.1 - 3.0.2)
WordPress 0.7 Posts SQL Injection Vulnerability (0.7)
WordPress 1.5.1.2 Multiple Vulnerabilities (1.0 - 1.5.1.2)
WordPress 2.0.1 Denial of Service Vulnerability (0.6.2 - 2.0.1)
WordPress 2.0.2 Username Remote PHP Code Injection Vulnerability (0.6.2 - 2.0.2)
WordPress 2.0.3 Multiple Unspecified Security Vulnerabilities (2.0 - 2.0.3)
WordPress 2.0.4 Multiple Security Vulnerabilities (2.0.4)
WordPress 2.0.5 Charset Decoding SQL Injection Vulnerability (0.6.2 - 2.0.5)
WordPress 2.0.5 Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)
WordPress 2.0.5 Invalid CSRF Token Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)
WordPress 2.0.6 'Zend_Hash_Del_Key_Or_Index' SQL Injection Vulnerability (0.6.2 - 2.0.6)
WordPress 2.0.9 Multiple Vulnerabilities (2.0 - 2.0.9)
WordPress 2.1.1 Command Execution Backdoor Vulnerability (2.1.1)
WordPress 2.1.1 Cross-Site Scripting Vulnerability (2.1.1)
WordPress 2.1.2 Multiple Vulnerabilities (2.1 - 2.1.2)
WordPress 2.2 Cross-Site Scripting Vulnerability (2.2)
WordPress 2.2 Multiple Vulnerabilities (2.2)
WordPress 2.2.1 Multiple Vulnerabilities (2.2.1)
WordPress 2.2.2 Multiple Vulnerabilities (2.2 - 2.2.2)
WordPress 2.3 Cross-Site Scripting Vulnerability (2.3)
WordPress 2.3.1 Unauthorized Post Access Vulnerability (2.3.1)
WordPress 2.3.2 Post Edit Unauthorized Access Vulnerability (0.7 - 2.3.2)
WordPress 2.3.3 Directory Traversal Vulnerability (0.6.2 - 2.3.3)
WordPress 2.5 Cookie Integrity Protection Unauthorized Access Vulnerability (0.6.2 - 2.5)
WordPress 2.5 Cross-Site Scripting Vulnerability (2.5)
WordPress 2.6.1 Lost Password SQL Column Truncation Unauthorized Access Vulnerability (0.71 - 2.6.1)
WordPress 2.6.2 Remote Code Execution Vulnerability (0.70 - 2.6.2)
WordPress 2.6.3 Cross-Site Scripting Vulnerability (0.6.2 - 2.6.3)
WordPress 2.8 Multiple Existing/Non-Existing Username Enumeration Weaknesses (0.6.2 - 2.8)
WordPress 2.8.1 Comment Author URI Cross-Site Scripting Vulnerability (0.6.2 - 2.8.1)
WordPress 2.8.2 Multiple Security Bypass Vulnerabilities (2.0 - 2.8.2)
WordPress 2.8.3 Admin Password Reset Security Bypass Vulnerability (0.6.2 - 2.8.3)
WordPress 2.8.4 Denial of Service Vulnerability (0.6.2 - 2.8.4)
WordPress 2.8.5 Multiple Vulnerabilities (2.8 - 2.8.5)
WordPress 2.9.1 Trashed Posts Security Bypass Vulnerability (2.9 - 2.9.1)
WordPress 3.0.1 Multiple Vulnerabilities (0.6.2 - 3.0.1)
WordPress 3.0.3 KSES Library Cross-Site Scripting Vulnerability (0.6.2 - 3.0.3)
WordPress 3.0.4 Multiple Vulnerabilities (0.6.2 - 3.0.4)
WordPress 3.1 Multiple Vulnerabilities (0.7 - 3.1)
WordPress 3.1.2 Multiple Vulnerabilities (3.0.1 - 3.1.2)
WordPress 3.1.3 Multiple SQL Injection Vulnerabilities (3.1 - 3.1.3)
WordPress 3.3 Cross-Site Scripting Vulnerability (3.3)
WordPress 3.3.1 Multiple Vulnerabilities (2.0 - 3.3.1)
WordPress 3.3.2 Multiple Vulnerabilities (3.3 - 3.3.2)
WordPress 3.4 Multiple Vulnerabilities (3.4)
WordPress 3.4.1 Multiple Vulnerabilities (2.0 - 3.4.1)
WordPress 3.5 Multiple Vulnerabilities (1.5 - 3.5)
WordPress 3.5.1 Multiple Vulnerabilities (2.0 - 3.5.1)
WordPress 3.6 Multiple Vulnerabilities (2.0 - 3.6)
WordPress 3.7.1 Multiple Vulnerabilities (3.7 - 3.7.1)
WordPress 3.7.3 Multiple Vulnerabilities (3.7 - 3.7.3)
WordPress 3.7.4 Multiple Vulnerabilities (3.7 - 3.7.4)
WordPress 3.7.x Arbitrary File Deletion Vulnerability (3.7 - 3.7.26)