CVE-2009-3622

Mô tả

Tham khảo

• codes.zerial.org/php/wp-trackbacks_dos.phps · Broken Link
• marc.info · Mailing List
• marc.info · Mailing List
• rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress · Exploit
• seclists.org/fulldisclosure/2009/Oct/263 · Exploit
• secunia.com/advisories/37088 · Third Party Advisory
• security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html · Third Party Advisory
• securitytracker.com/id · Third Party Advisory
• wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release · Vendor Advisory
• osvdb.org/59077 · Broken Link
• vupen.com/english/advisories/2009/2986 · Patch
• bugzilla.redhat.com/show_bug.cgi

Lỗ hổng khác của wordpress

• CVE-2026-87902CAO 8.1ĐANG BỊ KHAI THÁC (CISA KEV)An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the …
• CVE-2026-63030NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the …
• CVE-2026-60137TRUNG BÌNH 5.9ĐANG BỊ KHAI THÁC (CISA KEV)WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query…
• CVE-2022-4973TRUNG BÌNH 5.4WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with acce…
• CVE-2024-4439TRUNG BÌNH 6.1WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due t…