[mercantile.wordpress.org] Reflected XSS via AngularJS Template Injection #230234 Valid Cross-site Scripting – 2017-06-14 – 29 Wordpress 4.7.2 - Two XSS in Media Upload when file too large. #203515 Valid Cross-site Scripting – 2017-07-17 – 23 Content Spoofing @ https://irclogs.wordpress.org/ #278151 Valid Access Control – 2017-12-04 – 22 DOM Based XSS In mercantile.wordpress.org #230435 Valid Cross-site Scripting – 2017-06-14 – 21 Infrastructure - Photon - SSRF #204513 Valid Server-Side Request Forgery – 2017-07-17 – 21 Wordpress 4.7 - CSRF -> HTTP SSRF any private ip:port and basic-auth #187520 Valid Cross-Site Request Forgery – 2017-11-20 – 21 XSS in the search bar of mercantile.wordpress.org #221893 Valid Cross-site Scripting – 2017-05-20 – 19 WordPress DB Class, bad implementation of prepare method guides to sqli and information disclosure #179920 Valid SQL Injection – 2017-11-13 – 17 Reflected XSS at https://da.wordpress.org/themes/?s= via "s=" parameter #222040 Valid Cross-site Scripting – 2017-07-26 – 16 Stored self-XSS in mercantile.wordpress.org checkout #230232 Valid Cross-site Scripting – 2017-07-14 – 15 Authenticated Cross-site Scripting in Template Name #220903 Valid Cross-site Scripting – 2017-11-18 – 15 CSRF to add admin [wordpress] #149589 Valid Cross-Site Request Forgery – 2017-06-30 – 15 Buddypress 2.9.1 - Exceeding the maximum upload size - XSS leading to potential RCE. #263109 Valid No weakness recorded – 2017-11-02 – 14 Clickjacking wordcamp.org #230581 Valid Misconfiguration and Insecure Design – 2017-06-24 – 14 Missing SSL can leak job token #222036 Valid Cryptography – 2017-11-01 – 13 Clickjacking mercantile.wordpress.org #264125 Valid Misconfiguration and Insecure Design – 2017-09-08 – 12 Stored xss via template injection #250837 Valid Cross-site Scripting – 2017-12-11 – 12 Lack of Sanitization and Insufficient Authentication #249759 Valid Cross-site Scripting – 2017-12-26 – 11 [Buddypress] Arbitrary File Deletion through bp_avatar_set #183568 Valid No weakness recorded – 2017-08-22 – 9 Clickjacking - https://mercantile.wordpress.org/ #258283 Valid Misconfiguration and Insecure Design – 2017-08-28 – 8 Self-XSS in WordPress Editor Link Modal #224556 Valid Cross-site Scripting – 2017-11-08 – 8 Stored but [SELF] XSS in mercantile.wordpress.org #222224 Valid Cross-site Scripting – 2017-05-26 – 8 [BuddyPress 2.9.1] Open Redirect via "wp_http_referer" parameter on "bp-profile-edit" endpoint #277502 Valid Open Redirect – 2017-11-02 – 7 Lack of Password Confirmation when Changing Password and Email #224214 Duplicate No weakness recorded – 2017-04-28 – 7 Unauthenticated hidden groups disclosure via Ajax groups search #282176 Valid Access Control – 2017-11-02 – 6 WordPress core - Denial of Service via Cross Site Request Forgery #153093 Valid Denial of Service – 2017-11-16 – 6 Wordpress 4.8.1 - Rogue editor leads to RCE. And the risks of same origin frame scripting in general #263718 Informative No weakness recorded – 2017-10-04 – 4 Administrator(s) Information disclosure via JSON on wordpress.org #221734 N/A Information Disclosure – 2017-04-19 – 4 Clickjacking irclogs.wordpress.org #267075 Informative Misconfiguration and Insecure Design – 2017-10-12 – 2