Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:wordpress:3.0.5:*:*:*:*:*:*:*

part: a version: 3.0.5 update: *

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductWordpress (56378cf2-4348-590a-a4d7-419fcf17f3f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wordpress/wordpress purl2cpe 2026-06-01 10:12:03.526826
pkg:github/wordpress/wordpress-develop purl2cpe 2026-06-01 10:12:03.526827

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14719 vulnerable 2026-06-08 05:08:57.223747 Details available
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
Published: 2017-09-23T20:00:00.000Z
Updated: 2024-08-05T19:34:39.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.372253 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service (CPU consumption) via a large document, a different vulnerability than CVE-2014-5265.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.355701 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5240 vulnerable 2026-06-08 05:05:47.229183 Details available
Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0166 vulnerable 2026-06-08 05:05:11.984796 Details available
The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.
Published: 2014-04-09T23:00:00.000Z
Updated: 2024-08-06T09:05:39.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0165 vulnerable 2026-06-08 05:05:11.969328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6635 vulnerable 2026-06-08 05:03:01.324877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6634 vulnerable 2026-06-08 05:03:01.324230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6633 vulnerable 2026-06-08 05:03:01.317537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4422 vulnerable 2026-06-08 05:02:17.410164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4421 vulnerable 2026-06-08 05:02:17.399378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3414 vulnerable 2026-06-08 05:02:09.657728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3385 vulnerable 2026-06-08 05:02:09.533323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3384 vulnerable 2026-06-08 05:02:09.520072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2404 vulnerable 2026-06-08 05:02:04.221630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2403 vulnerable 2026-06-08 05:02:04.219098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2402 vulnerable 2026-06-08 05:02:04.216894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2401 vulnerable 2026-06-08 05:02:04.214685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2400 vulnerable 2026-06-08 05:02:04.198981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2399 vulnerable 2026-06-08 05:02:04.193306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1936 vulnerable 2026-06-08 05:00:51.566774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0937 vulnerable 2026-06-08 05:00:46.568700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0782 vulnerable 2026-06-08 05:00:45.099147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4957 vulnerable 2026-06-08 04:59:34.037839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4956 vulnerable 2026-06-08 04:59:34.035823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4899 vulnerable 2026-06-08 04:59:33.725903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4898 vulnerable 2026-06-08 04:59:33.719233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.