Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before 3.5.2, TinyMCE Image Manager 1.1 and earlier, and other products allows remote. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.
WordPress
XSS
NVD
CVSS 2.0
10.0
EPSS
4.3%
Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.
WordPress
Information Disclosure
NVD
CVSS 2.0
10.0
EPSS
1.7%