GCVE - cpe:2.3:a:wordpress:wordpress:3.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:wordpress:3.8:*:*:*:*:*:*:*

part: a version: 3.8 update: *

Vendor	Wordpress (`21977de4-0364-5ea6-90ad-48069434cf00`)
Product	Wordpress (`56378cf2-4348-590a-a4d7-419fcf17f3f1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/wordpress/wordpress`	purl2cpe	2026-06-01 10:12:03.527169
`pkg:github/wordpress/wordpress-develop`	purl2cpe	2026-06-01 10:12:03.527171

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-14719`	vulnerable	2026-06-08 05:08:57.247846	Details available Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components. Published: 2017-09-23T20:00:00.000Z Updated: 2024-08-05T19:34:39.999Z Open on db.gcve.eu Reference links https://www.debian.org/security/2017/dsa-3997 http://www.securityfocus.com/bid/100912 http://www.securitytracker.com/id/1039553 https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/ https://wpvulndb.com/vulnerabilities/8911	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9039`	vulnerable	2026-06-08 05:06:10.684208	Details available wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message. Published: 2014-11-25T23:00:00.000Z Updated: 2024-08-06T13:33:13.527Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3085 http://openwall.com/lists/oss-security/2014/11/25/12 http://advisories.mageia.org/MGASA-2014-0493.html http://core.trac.wordpress.org/changeset/30431 http://www.securitytracker.com/id/1031243	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9038`	vulnerable	2026-06-08 05:06:10.683359	Details available wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to conduct server-side request forgery (SSRF) attacks by referring to a 127.0.0.0/8 resource. Published: 2014-11-25T23:00:00.000Z Updated: 2024-08-06T13:33:13.352Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3085 http://openwall.com/lists/oss-security/2014/11/25/12 https://core.trac.wordpress.org/changeset/30444 http://advisories.mageia.org/MGASA-2014-0493.html http://www.securitytracker.com/id/1031243	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9037`	vulnerable	2026-06-08 05:06:10.682591	Details available WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash. Published: 2014-11-25T23:00:00.000Z Updated: 2024-08-06T13:33:13.510Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3085 http://openwall.com/lists/oss-security/2014/11/25/12 http://advisories.mageia.org/MGASA-2014-0493.html http://www.securitytracker.com/id/1031243 http://www.mandriva.com/security/advisories?name=MDVSA-2014:233	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9036`	vulnerable	2026-06-08 05:06:10.676957	Details available Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted Cascading Style Sheets (CSS) token sequence in a post. Published: 2014-11-25T23:00:00.000Z Updated: 2024-08-06T13:33:13.392Z Open on db.gcve.eu Reference links http://www.debian.org/security/2014/dsa-3085 http://openwall.com/lists/oss-security/2014/11/25/12 http://advisories.mageia.org/MGASA-2014-0493.html http://www.securitytracker.com/id/1031243 http://www.securityfocus.com/bid/71236	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9035`	vulnerable	2026-06-08 05:06:10.676239	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9034`	vulnerable	2026-06-08 05:06:10.675519	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-9031`	vulnerable	2026-06-08 05:06:10.667729	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5266`	vulnerable	2026-06-08 05:05:47.372628	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5265`	vulnerable	2026-06-08 05:05:47.356248	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5240`	vulnerable	2026-06-08 05:05:47.241865	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0166`	vulnerable	2026-06-08 05:05:11.985174	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0165`	vulnerable	2026-06-08 05:05:11.981913	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.