Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:wordpress:3.1.2:*:*:*:*:*:*:*

part: a version: 3.1.2 update: *

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductWordpress (56378cf2-4348-590a-a4d7-419fcf17f3f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wordpress/wordpress purl2cpe 2026-06-01 10:12:03.526861
pkg:github/wordpress/wordpress-develop purl2cpe 2026-06-01 10:12:03.526862

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14719 vulnerable 2026-06-08 05:08:57.226127 Details available
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
Published: 2017-09-23T20:00:00.000Z
Updated: 2024-08-05T19:34:39.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.372317 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service (CPU consumption) via a large document, a different vulnerability than CVE-2014-5265.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.355767 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5240 vulnerable 2026-06-08 05:05:47.231192 Details available
Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0166 vulnerable 2026-06-08 05:05:11.984863 Details available
The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.
Published: 2014-04-09T23:00:00.000Z
Updated: 2024-08-06T09:05:39.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0165 vulnerable 2026-06-08 05:05:11.971304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6635 vulnerable 2026-06-08 05:03:01.324942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6634 vulnerable 2026-06-08 05:03:01.324295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6633 vulnerable 2026-06-08 05:03:01.319765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4422 vulnerable 2026-06-08 05:02:17.410227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4421 vulnerable 2026-06-08 05:02:17.399446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3414 vulnerable 2026-06-08 05:02:09.657798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3385 vulnerable 2026-06-08 05:02:09.533386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3384 vulnerable 2026-06-08 05:02:09.520139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2404 vulnerable 2026-06-08 05:02:04.221747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2403 vulnerable 2026-06-08 05:02:04.219167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2402 vulnerable 2026-06-08 05:02:04.216963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2401 vulnerable 2026-06-08 05:02:04.214754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2400 vulnerable 2026-06-08 05:02:04.199051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2399 vulnerable 2026-06-08 05:02:04.195377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1936 vulnerable 2026-06-08 05:00:51.566847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0937 vulnerable 2026-06-08 05:00:46.568771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0782 vulnerable 2026-06-08 05:00:45.101187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4899 vulnerable 2026-06-08 04:59:33.725967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4898 vulnerable 2026-06-08 04:59:33.721428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3130 vulnerable 2026-06-08 04:58:10.722564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3129 vulnerable 2026-06-08 04:58:10.722194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3128 vulnerable 2026-06-08 04:58:10.721837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3127 vulnerable 2026-06-08 04:58:10.721447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3126 vulnerable 2026-06-08 04:58:10.721057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3125 vulnerable 2026-06-08 04:58:10.720684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3122 vulnerable 2026-06-08 04:58:10.715929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.