wordpress-develop vulnerabilities
5 known vulnerabilities in wordpress-develop from WordPress. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
wordpress-develop: Deserialization of Untrusted Data
WordPress is an open publishing platform for the Web. Unserialization of instances of the `WP_HTML_Token` class allows for code execution via its `__destruct()` magic method. This issue was fixed in WordPress 6.4.2 on December 6th, 2023. Versions prior to 6.4.
- 8.8 High severity
wordpress-develop: Unrestricted Upload of File with Dangerous Type
WordPress is an open publishing platform for the Web. It's possible for a file of a type other than a zip file to be submitted as a new plugin by an administrative user on the Plugins -> Add New -> Upload Plugin screen in WordPress. If FTP credentials are requ
- 8.8 High severity
wordpress-develop: Improper Neutralization of Special Elements used in an SQL Command
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to lack of proper sanitization in one of the classes, there's potential for unintended SQL queries to be executed. This has been patched in Wor
- 7.2 High severity
wordpress-develop: Deserialization of Untrusted Data
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has be
- 7.5 High severity
wordpress-develop: Improper Neutralization of Special Elements used in an SQL Command
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way