| Max CVSS | 5.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-2403 | 4.3 |
wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
|
19-12-2017 - 02:29 | 21-04-2012 - 23:55 | |
| CVE-2012-2402 | 5.5 |
wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors.
|
19-12-2017 - 02:29 | 21-04-2012 - 23:55 | |
| CVE-2012-2404 | 4.3 |
wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
|
19-12-2017 - 02:29 | 21-04-2012 - 23:55 |