WordPress 0.711
Approved changes feed: RSS · Atom
cpe:2.3:a:wordpress:wordpress:0.711:*:*:*:*:*:*:*
part: a version: 0.711 update: *
| Vendor | Wordpress (21977de4-0364-5ea6-90ad-48069434cf00) |
|---|---|
| Product | Wordpress (56378cf2-4348-590a-a4d7-419fcf17f3f1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wordpress/wordpress |
purl2cpe | 2026-06-01 10:12:03.402558 |
pkg:github/wordpress/wordpress-develop |
purl2cpe | 2026-06-01 10:12:03.402560 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-0937 |
vulnerable | 2026-06-08 05:00:46.567507 |
Details available
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898. NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time
Published: 2012-01-30T17:00:00.000Z
Updated: 2024-09-16T18:39:54.478Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0782 |
vulnerable | 2026-06-08 05:00:45.057528 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance
Published: 2012-01-30T17:00:00.000Z
Updated: 2024-09-16T23:26:38.397Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4899 |
vulnerable | 2026-06-08 04:59:33.724886 |
Details available
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query. NOTE: the vendor disputes the significance of this issue; however, remote code execution makes the issue important in many realistic environments
Published: 2012-01-30T17:00:00.000Z
Updated: 2024-09-16T19:05:06.613Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4898 |
vulnerable | 2026-06-08 04:59:33.679307 |
Details available
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attacks via a series of requests with different uname and pwd parameters. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether providing intentionally vague error messages during installation would be reasonable from a usability perspective
Published: 2012-01-30T17:00:00.000Z
Updated: 2024-09-16T16:24:04.778Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2853 |
vulnerable | 2026-06-08 04:51:30.864209 |
Details available
Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edit-category-form.php, (3) edit-form-advanced.php, (4) edit-form-comment.php, (5) edit-link-category-form.php, (6) edit-link-form.php, (7) edit-page-form.php, and (8) edit-tag-form.php in wp-admin/.
Published: 2009-08-18T20:41:00.000Z
Updated: 2024-08-07T06:07:37.242Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2432 |
vulnerable | 2026-06-08 04:51:28.489905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2334 |
vulnerable | 2026-06-08 04:51:27.799776 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5278 |
vulnerable | 2026-06-08 04:50:50.422246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4769 |
vulnerable | 2026-06-08 04:50:48.107564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3747 |
vulnerable | 2026-06-08 04:50:36.261184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3233 |
vulnerable | 2026-06-08 04:50:33.563640 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2146 |
vulnerable | 2026-06-08 04:50:23.062303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.