| 2019-03-13 |
WordPress 3.9-5.1 - Comment Cross-Site Scripting (XSS) |
fixed in version 4.1.26 |
| 2019-02-28 |
WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution |
fixed in version 5.0.1 |
| 2018-12-13 |
WordPress <= 5.0 - File Upload to XSS on Apache Web Servers |
fixed in version 4.1.25 |
| 2018-12-13 |
WordPress <= 5.0 - User Activation Screen Search Engine Indexing |
fixed in version 4.1.25 |
| 2018-12-13 |
WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins |
fixed in version 4.1.25 |
| 2018-12-13 |
WordPress <= 5.0 - Authenticated Cross-Site Scripting (XSS) |
fixed in version 4.1.25 |
| 2018-12-13 |
WordPress <= 5.0 - PHP Object Injection via Meta Data |
fixed in version 4.1.25 |
| 2018-12-13 |
WordPress <= 5.0 - Authenticated Post Type Bypass |
fixed in version 4.1.25 |
| 2018-12-13 |
WordPress <= 5.0 - Authenticated File Delete |
fixed in version 4.1.25 |
| 2018-06-27 |
WordPress <= 4.9.6 - Authenticated Arbitrary File Deletion |
fixed in version 4.1.24 |
