Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:wordpress:3.1.1:*:*:*:*:*:*:*

part: a version: 3.1.1 update: *

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductWordpress (56378cf2-4348-590a-a4d7-419fcf17f3f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wordpress/wordpress purl2cpe 2026-06-01 10:12:03.526852
pkg:github/wordpress/wordpress-develop purl2cpe 2026-06-01 10:12:03.526853

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14719 vulnerable 2026-06-08 05:08:57.225530 Details available
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
Published: 2017-09-23T20:00:00.000Z
Updated: 2024-08-05T19:34:39.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.372300 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service (CPU consumption) via a large document, a different vulnerability than CVE-2014-5265.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.355750 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5240 vulnerable 2026-06-08 05:05:47.230684 Details available
Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0166 vulnerable 2026-06-08 05:05:11.984846 Details available
The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.
Published: 2014-04-09T23:00:00.000Z
Updated: 2024-08-06T09:05:39.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0165 vulnerable 2026-06-08 05:05:11.970828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6635 vulnerable 2026-06-08 05:03:01.324926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6634 vulnerable 2026-06-08 05:03:01.324279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6633 vulnerable 2026-06-08 05:03:01.319035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4422 vulnerable 2026-06-08 05:02:17.410211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4421 vulnerable 2026-06-08 05:02:17.399428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3414 vulnerable 2026-06-08 05:02:09.657780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3385 vulnerable 2026-06-08 05:02:09.533370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3384 vulnerable 2026-06-08 05:02:09.520122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2404 vulnerable 2026-06-08 05:02:04.221730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2403 vulnerable 2026-06-08 05:02:04.219146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2402 vulnerable 2026-06-08 05:02:04.216946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2401 vulnerable 2026-06-08 05:02:04.214736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2400 vulnerable 2026-06-08 05:02:04.199033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2399 vulnerable 2026-06-08 05:02:04.194894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1936 vulnerable 2026-06-08 05:00:51.566830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0937 vulnerable 2026-06-08 05:00:46.568755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0782 vulnerable 2026-06-08 05:00:45.100695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4899 vulnerable 2026-06-08 04:59:33.725951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4898 vulnerable 2026-06-08 04:59:33.720869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3130 vulnerable 2026-06-08 04:58:10.722545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3129 vulnerable 2026-06-08 04:58:10.722175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3128 vulnerable 2026-06-08 04:58:10.721819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3127 vulnerable 2026-06-08 04:58:10.721430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3126 vulnerable 2026-06-08 04:58:10.721039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3125 vulnerable 2026-06-08 04:58:10.720665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3122 vulnerable 2026-06-08 04:58:10.715169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.