[mercantile.wordpress.org] Reflected XSS via AngularJS Template Injection Analysed #230234 Valid Cross-site Scripting Medium 2017-06-14 – 29 Wordpress 4.7.2 - Two XSS in Media Upload when file too large. Analysed #203515 Valid Cross-site Scripting High 2017-07-17 – 23 Content Spoofing @ https://irclogs.wordpress.org/ Analysed #278151 Valid Access Control Low 2017-12-04 – 22 DOM Based XSS In mercantile.wordpress.org Analysed #230435 Valid Cross-site Scripting Medium 2017-06-14 – 21 Infrastructure - Photon - SSRF Analysed #204513 Valid Server-Side Request Forgery Medium 2017-07-17 – 21 Wordpress 4.7 - CSRF -> HTTP SSRF any private ip:port and basic-auth Analysed #187520 Valid Cross-Site Request Forgery High 2017-11-20 – 21 XSS in the search bar of mercantile.wordpress.org #221893 Valid Cross-site Scripting Medium 2017-05-20 – 19 WordPress DB Class, bad implementation of prepare method guides to sqli and information disclosure #179920 Valid SQL Injection Critical 2017-11-13 – 17 Reflected XSS at https://da.wordpress.org/themes/?s= via "s=" parameter #222040 Valid Cross-site Scripting Medium 2017-07-26 – 16 Stored self-XSS in mercantile.wordpress.org checkout #230232 Valid Cross-site Scripting Low 2017-07-14 – 15 Authenticated Cross-site Scripting in Template Name #220903 Valid Cross-site Scripting Medium 2017-11-18 – 15 CSRF to add admin [wordpress] #149589 Valid Cross-Site Request Forgery – 2017-06-30 – 15 Buddypress 2.9.1 - Exceeding the maximum upload size - XSS leading to potential RCE. #263109 Valid No weakness recorded Medium 2017-11-02 – 14 Clickjacking wordcamp.org #230581 Valid Misconfiguration and Insecure Design Low 2017-06-24 – 14 Missing SSL can leak job token #222036 Valid Cryptography Low 2017-11-01 – 13 Clickjacking mercantile.wordpress.org #264125 Valid Misconfiguration and Insecure Design Low 2017-09-08 – 12 Stored xss via template injection #250837 Valid Cross-site Scripting High 2017-12-11 – 12 Lack of Sanitization and Insufficient Authentication #249759 Valid Cross-site Scripting Medium 2017-12-26 – 11 [Buddypress] Arbitrary File Deletion through bp_avatar_set #183568 Valid No weakness recorded High 2017-08-22 – 9 Clickjacking - https://mercantile.wordpress.org/ #258283 Valid Misconfiguration and Insecure Design Low 2017-08-28 – 8 Self-XSS in WordPress Editor Link Modal #224556 Valid Cross-site Scripting Low 2017-11-08 – 8 Stored but [SELF] XSS in mercantile.wordpress.org #222224 Valid Cross-site Scripting Low 2017-05-26 – 8 [BuddyPress 2.9.1] Open Redirect via "wp_http_referer" parameter on "bp-profile-edit" endpoint #277502 Valid Open Redirect Low 2017-11-02 – 7 Unauthenticated hidden groups disclosure via Ajax groups search #282176 Valid Access Control Medium 2017-11-02 – 6 WordPress core - Denial of Service via Cross Site Request Forgery #153093 Valid Denial of Service – 2017-11-16 – 6