Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:wordpress:3.0.1:*:*:*:*:*:*:*

part: a version: 3.0.1 update: *

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductWordpress (56378cf2-4348-590a-a4d7-419fcf17f3f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wordpress/wordpress purl2cpe 2026-06-01 10:12:03.478289
pkg:github/wordpress/wordpress-develop purl2cpe 2026-06-01 10:12:03.478290

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14719 vulnerable 2026-06-08 05:08:57.220740 Details available
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
Published: 2017-09-23T20:00:00.000Z
Updated: 2024-08-05T19:34:39.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.372183 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service (CPU consumption) via a large document, a different vulnerability than CVE-2014-5265.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.355628 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5240 vulnerable 2026-06-08 05:05:47.226843 Details available
Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0166 vulnerable 2026-06-08 05:05:11.984725 Details available
The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.
Published: 2014-04-09T23:00:00.000Z
Updated: 2024-08-06T09:05:39.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0165 vulnerable 2026-06-08 05:05:11.966945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6635 vulnerable 2026-06-08 05:03:01.324810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6634 vulnerable 2026-06-08 05:03:01.324150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6633 vulnerable 2026-06-08 05:03:01.315115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4422 vulnerable 2026-06-08 05:02:17.410096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4421 vulnerable 2026-06-08 05:02:17.399306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3414 vulnerable 2026-06-08 05:02:09.657658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3385 vulnerable 2026-06-08 05:02:09.533259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3384 vulnerable 2026-06-08 05:02:09.520002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2404 vulnerable 2026-06-08 05:02:04.221561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2403 vulnerable 2026-06-08 05:02:04.219031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2402 vulnerable 2026-06-08 05:02:04.216831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2401 vulnerable 2026-06-08 05:02:04.214618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2400 vulnerable 2026-06-08 05:02:04.198911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2399 vulnerable 2026-06-08 05:02:04.191237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1936 vulnerable 2026-06-08 05:00:51.565075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0937 vulnerable 2026-06-08 05:00:46.568486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0782 vulnerable 2026-06-08 05:00:45.096064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5270 vulnerable 2026-06-08 04:59:35.409985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4957 vulnerable 2026-06-08 04:59:34.037773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4956 vulnerable 2026-06-08 04:59:34.035749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4899 vulnerable 2026-06-08 04:59:33.725836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4898 vulnerable 2026-06-08 04:59:33.717241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-5106 vulnerable 2026-06-08 04:56:32.266016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.