Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2012-2401

Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed
Vendors
Moxiecode Wordpress
Products
Plupload Wordpress
CVE-2013-0237

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0 · 4.3 Medium EPSS 3.1% KEV · Not listed
Vendors
Fedoraproject Moxiecode Wordpress
Products
Fedora Plupload Wordpress