Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:wordpress:3.1.3:*:*:*:*:*:*:*

part: a version: 3.1.3 update: *

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductWordpress (56378cf2-4348-590a-a4d7-419fcf17f3f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wordpress/wordpress purl2cpe 2026-06-01 10:12:03.526864
pkg:github/wordpress/wordpress-develop purl2cpe 2026-06-01 10:12:03.526865

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14719 vulnerable 2026-06-08 05:08:57.226626 Details available
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
Published: 2017-09-23T20:00:00.000Z
Updated: 2024-08-05T19:34:39.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5266 vulnerable 2026-06-08 05:05:47.372334 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service (CPU consumption) via a large document, a different vulnerability than CVE-2014-5265.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5265 vulnerable 2026-06-08 05:05:47.355784 Details available
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5240 vulnerable 2026-06-08 05:05:47.231722 Details available
Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a crafted avatar URL.
Published: 2014-08-18T10:00:00.000Z
Updated: 2024-08-06T11:41:47.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0166 vulnerable 2026-06-08 05:05:11.984879 Details available
The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does not properly determine the validity of authentication cookies, which makes it easier for remote attackers to obtain access via a forged cookie.
Published: 2014-04-09T23:00:00.000Z
Updated: 2024-08-06T09:05:39.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0165 vulnerable 2026-06-08 05:05:11.971848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6635 vulnerable 2026-06-08 05:03:01.324958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6634 vulnerable 2026-06-08 05:03:01.324311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6633 vulnerable 2026-06-08 05:03:01.320274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4422 vulnerable 2026-06-08 05:02:17.410243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4421 vulnerable 2026-06-08 05:02:17.399462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3414 vulnerable 2026-06-08 05:02:09.657815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3385 vulnerable 2026-06-08 05:02:09.533402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3384 vulnerable 2026-06-08 05:02:09.520161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2404 vulnerable 2026-06-08 05:02:04.221764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2403 vulnerable 2026-06-08 05:02:04.219183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2402 vulnerable 2026-06-08 05:02:04.216978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2401 vulnerable 2026-06-08 05:02:04.214772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2400 vulnerable 2026-06-08 05:02:04.199069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2399 vulnerable 2026-06-08 05:02:04.195849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1936 vulnerable 2026-06-08 05:00:51.566864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0937 vulnerable 2026-06-08 05:00:46.568788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0782 vulnerable 2026-06-08 05:00:45.101792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4899 vulnerable 2026-06-08 04:59:33.726063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4898 vulnerable 2026-06-08 04:59:33.722048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.