List of Vulnerability in WordPress 3.5.1

As of late numerous Sites are hacked Now what is normal in these locales?

They have word-press 3.5.1 which is helpless against some assault.

A shortcoming and different vulnerabilities have been accounted for in WordPress, which can be abused by noxious clients to uncover certain framework data and sidestep certain security limitations and by vindictive individuals to lead caricaturing and cross-site scripting assaults, sidestep certain security confinements, and cause a DoS (Denial of Service).

1) A blunder while figuring the hash cycle tally inside the "crypt_private()" strategy in/wp-incorporates/class-phpass.php can be misused to debilitate CPU and memory assets by sending HTTP asks for with an exceptionally created secret key treat.

Effective misuse of this weakness requires information of the URL for a secret word ensured post.

This weakness is affirmed in variant 3.5.1. Earlier forms may likewise be influenced.

Here is full points of interest and misuse is accessible ;visit this connection.

https://vndh.net/note:wordpress-351-disavowal benefit

2) An unspecified mistake inside the HTTP Programming interface identified with server-side solicitations can be misused to access the site.

Here is full subtle elements.

http://lab.onsec.ru/2013/01/wordpress-xmlrpc-pingback-additional.html

3) An unspecified mistake can be misused to sidestep certain confinements when distributing posts.

Fruitful abuse requires the "Benefactor" part.

4) An unspecified blunder can be abused to reassign the post initiation.

5) Certain info identified with SWFUpload isn't appropriately purified before being come back to the client. This can be abused to execute subjective HTML and content code in a client's program session in setting of an influenced site.

6) Certain information identified with Streak applet inside TinyMCE Media Module isn't legitimately confirmed before being utilized. This can be misused to e.g. parody unspecified substance.

7) Certain info identified with media transferring isn't appropriately purified before being come back to the client. This can be abused to execute discretionary HTML and content code in a client's program session in setting of an influenced site.

8) A mistake when dealing with fizzled transfers can be misused to reveal the full establishment way.