WordPress Vulnerabilities

WordPress - Plupload Unspecified Cross-Site Scripting (XSS)

Affects WordPress

3.8.1
Fixed in WordPress 3.8.2
3.7.1
Fixed in WordPress 3.7.2
3.5
Fixed in WordPress 3.5.1
3.4.2
Fixed in WordPress 3.5.1
3.4.1
Fixed in WordPress 3.5.1
3.4
Fixed in WordPress 3.5.1
3.3.3
Fixed in WordPress 3.5.1
3.3.2
Fixed in WordPress 3.5.1

Miscellaneous

Verified
No
WPVDB ID
4612d310-6d6d-46d8-ab76-42ec848bb99c

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2020-10-25 (about 3 years ago)

Other

Published
Title
Published
2017-03-17
Title
Invite Anyone <= 1.3.14 - Change of Email Invitation Content
Published
2019-08-25
Title
WooCommerce PayU India <= 2.1.1 - Price Tampering
Published
2015-07-18
Title
WordPress Mobile Pack <= 2.1.2 - Information Disclosure
Published
2015-05-26
Title
Estrutura-Basica - Local File Download
Published
2016-11-10
Title
W3 Total Cache < 0.9.5 - Weak Validation of Amazon SNS Push Messages