WordPress

WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL 数据库的服务器上架设自己的网志。也可以把 WordPress 当作一个内容管理系统（CMS）来使用。WordPress 是一个免费的开源项目，在GNU通用公共许可证下授权发布。

WordPress 被认为是Michel Valdrighi所开发的网志平台b2 cafelog的正式继承者。“WordPress”这个名字出自 Christine Selleck 的主意，他是主要开发者Matt Mullenweg的朋友。

Website : http://wordpress.org/

Chart

2012-04-27WordPress Anti-CSRF令牌安全绕过漏洞
2012-02-22Wordpress SB Uploader Plugin Shell Upload Vulnerability
2012-01-24WordPress 3.3.1 Code Execution / Cross Site Scripting
2012-01-19AllWebMenus WordPress Menu Plugin Arbitrary file upload
2012-01-13WordPress Blog Cross Site Scripting
2012-01-03Reflected Cross Site Scripting in wordpress 3.3
2012-01-02WordPress Comment Rating SQL Injection
2011-12-28WordPress WP Symposium插件任意文件上传漏洞
2011-12-27WordPress邮件列表插件任意文件下载漏洞
2011-12-08WordPress Pretty Link 1.5.2 Cross Site Scripting
2011-12-02WordPress Flash Album Gallery Cross Site Scripting
2011-11-25Wordpress enable-latex plugin Remote File Include Vulnerabilities
2011-11-23Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities
2011-11-22WordPress Advanced Text Widget plugin suffers from a cross site scripting vulnerability
2011-11-22WordPress Adminimize plugin suffers from a cross site scripting vulnerability
2011-11-19WordPress jetpack plugin SQL Injection Vulnerability
2011-11-13Wordpress Zingiri Plugin <= 2.2.3 (ajax_save_name.php) Remote Code Execution
2011-11-08WordPress AdRotate plugin <= 3.6.6 SQL Injection Vulnerability
2011-10-30WordPress WP Glossary plugin SQL Injection Vulnerability
2011-10-30WordPress WP Glossary Plugin SQL Injection
2011-10-27WordPress wptouch plugin SQL Injection Vulnerability
2011-10-27WordPress Classipress Theme <= 3.1.4 Stored XSS
2011-10-17Wordpress Mailing List 1.3.2远程文件包含漏洞
2011-10-17WordPress Photo Album Plus <= 4.1.1 SQL注入漏洞
2011-10-14WordPress Photo Album Plus <= 4.1.1 SQL Injection Vulnerability
2011-10-05WordPress Redirection 2.2.9 Persistent Cross Site Scripting
2011-09-26WordPress GD Star Rating plugin <= 1.9.10 SQL Injection
2011-09-22WordPress WP Bannerize plugin <= 2.8.7 SQL Injection Vulnerability
2011-09-21WordPress Pretty Link 1.4.56 Cross Site Scripting
2011-09-21WordPress WP e-Commerce插件"cs1"参数SQL注入漏洞

>>more vulnerability