Wordpress Mu
Vendor:
First CVE: Jul 3, 2007 · Active for 19 years
10
Total CVEs
More Total CVEs than 88% of tracked products
3.3
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
5.4
Avg CVSS
Higher Avg CVSS than 11% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Wordpress Mu over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 3, 2007
19 years ago
Most Recent CVE
Jul 10, 2009
6,224 days ago
CVE Severity & Scoring
Wordpress Mu10 CVEs
90%
10%
All CVEs352,427 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown10 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown10 (100.0%)
User Interaction
None0 (0.0%)
Unknown10 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown10 (100.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-2335MEDIUM WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumera | Jul 10, 2009 | 5.0 | 78 | NO | YES |
CVE-2008-5695HIGH wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users | Dec 19, 2008 | 8.5 | 39 | NO | YES |
CVE-2009-2334MEDIUM wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers | Jul 10, 2009 | 4.9 | 29 | NO | YES |
CVE-2008-4671MEDIUM Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and | Oct 22, 2008 | 4.3 | 23 | NO | YES |
CVE-2009-1030MEDIUM Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject a | Mar 20, 2009 | 4.3 | 22 | NO | YES |
CVE-2009-2432MEDIUM WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an er | Jul 10, 2009 | 5.0 | 19 | NO | NO |
CVE-2009-2336MEDIUM The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allow | Jul 10, 2009 | 5.0 | 18 | NO | NO |
CVE-2007-3543MEDIUM Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code by making | Jul 3, 2007 | 6.0 | 18 | NO | NO |
CVE-2007-3544MEDIUM Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload and execute arbitrary | Jul 3, 2007 | 6.5 | 18 | NO | NO |
CVE-2007-4544MEDIUM Cross-site scripting (XSS) vulnerability in wp-newblog.php in WordPress multi-user (MU) 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the weblo | Aug 27, 2007 | 4.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
10.0% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
50.0% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Wordpress Mu
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.7 | 1 | 4.3 | 4.7% | 0 | 1 |
| 2.6.5 | 3 | 4.7 | 4.7% | 0 | 2 |
| 2.6.3 | 3 | 4.7 | 4.7% | 0 | 2 |
| 2.6.2 | 3 | 4.7 | 4.7% | 0 | 2 |
| 2.6.1 | 3 | 4.7 | 4.7% | 0 | 2 |
| 2.6 | 2 | 5.0 | 4.7% | 0 | 1 |
| 1.5.1 | 3 | 4.7 | 4.7% | 0 | 2 |
| 1.5 | 3 | 4.7 | 4.7% | 0 | 2 |
| 1.3.3 | 3 | 4.7 | 4.7% | 0 | 2 |
| 1.3.2 | 3 | 4.7 | 4.7% | 0 | 2 |
| 1.3.1 | 4 | 4.6 | 4.5% | 0 | 3 |
| 1.3 | 4 | 4.6 | 4.5% | 0 | 3 |
| 1.2.5a | 3 | 4.7 | 4.7% | 0 | 2 |
| 1.2.4 | 3 | 4.7 | 4.7% | 0 | 2 |
| 1.2.3 | 4 | 4.6 | 4.5% | 0 | 3 |
| 1.2.2 | 4 | 4.6 | 4.5% | 0 | 3 |
| 1.2.1 | 3 | 4.7 | 4.7% | 0 | 2 |
| 1.2 | 3 | 4.7 | 4.7% | 0 | 2 |
| 1.1.1 | 3 | 4.7 | 4.7% | 0 | 2 |
| 1.1 | 3 | 4.7 | 4.7% | 0 | 2 |