CVE-2012-6633

Threats › CVE-2012-6633

Category: wordpress-vulnerability Published: 2012-06-27 Source updated: 2024-01-22 First seen: 2026-06-06 16:22 UTC Last updated: 2026-06-06 16:22 UTC Source: Wordfence

Description

Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field. Affected software — core: WordPress (affected: [*, 3.3.3)). CVSS 6.5 (Medium) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

cve CVE-2012-6633

IOC database

Type: cve
Value: CVE-2012-6633
First seen: 2026-06-06 16:22 UTC
Last seen: 2026-09-27 21:57 UTC
Attached to this threat: 2026-06-06 16:22 UTC
Appears in: 1 threat
Description: WordPress Core <= 3.3.2 - Cross-Site Scripting

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.

References (3)

CVE record: CVE-2012-6633 Wordfence
Wordfence vulnerability detail Wordfence
https://www.wordfence.com/threat-intel/vulnerabilities/id/f29f9290-1f98-4019-997b-e33f2c151a5d?source=api-prod Wordfence

Remediations (1)

Wordfence remediation: WordPress

Wordfence

Update to version 3.3.3, or a newer patched version

2026-06-06 16:22 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

CVE-2012-6633 medium

WordPress Core <= 3.3.2 - Cross-Site Scripting