Vulnerability Name CVE Severity
WordPress 6.5 Cross-Site Scripting (6.5) CVE-2024-4439
WordPress 6.5.x Multiple Vulnerabilities (6.5 - 6.5.4)
WordPress 7PK - Security Features Vulnerability (CVE-2014-9039) CVE-2014-9039
WordPress 7PK - Security Features Vulnerability (CVE-2016-10148) CVE-2016-10148
WordPress Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2019-17675) CVE-2019-17675
WordPress admin accessible without HTTP authentication
WordPress allows editing theme/plugin files
WordPress Anti-CSRF Token Security Bypass Weakness (3.3.1) CVE-2012-1936
WordPress Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2020-4050) CVE-2020-4050
WordPress caching plugins PHP code execution CVE-2013-2010
WordPress Cleartext Storage of Sensitive Information Vulnerability (CVE-2017-14990) CVE-2017-14990
WordPress Clickjacking Vulnerability (0.7 - 3.1.2) CVE-2011-3127
WordPress Comment Post Cross-Site Scripting Vulnerability (2.0) CVE-2006-0733
WordPress configuration file weak file permissions
WordPress Configuration Vulnerability (CVE-2009-2335) CVE-2009-2335
WordPress Configuration Vulnerability (CVE-2009-2336) CVE-2009-2336
WordPress Configuration Vulnerability (CVE-2013-2205) CVE-2013-2205
WordPress Cookie Data PHP Code Injection Vulnerability (1.5 - 1.5.1.3) CVE-2005-2612
WordPress Cookies Security Bypass Weakness (1.5 - 2.3.1) CVE-2007-6013
WordPress Credentials Management Errors Vulnerability (CVE-2009-2762) CVE-2009-2762
WordPress Credentials Management Errors Vulnerability (CVE-2016-5838) CVE-2016-5838
WordPress Cross-Domain Flash Injection Vulnerability (0.70 - 3.6.1) CVE-2016-9263 CVE-2018-5776
WordPress Cross-Site Request Forgery (0.70 - 3.6.1) CVE-2019-9787
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2007-4893) CVE-2007-4893
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0198) CVE-2008-0198
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-5113) CVE-2008-5113
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-1936) CVE-2012-1936
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-3384) CVE-2012-3384
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-4448) CVE-2012-4448
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-7233) CVE-2013-7233
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-5204) CVE-2014-5204
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-5205) CVE-2014-5205
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9033) CVE-2014-9033
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5731) CVE-2015-5731
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6635) CVE-2016-6635
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6897) CVE-2016-6897
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5489) CVE-2017-5489
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5492) CVE-2017-5492
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-6819) CVE-2017-6819
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-9064) CVE-2017-9064
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-9787) CVE-2019-9787
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28040) CVE-2020-28040
WordPress Cross-Site Scripting Vulnerability (0.70 - 3.7.11) CVE-2016-1564
WordPress Cross-Site Scripting Vulnerability (0.70 - 4.1.1) CVE-2015-3438
WordPress Cross-Site Scripting Vulnerability (3.0 - 3.6.1) CVE-2014-9031
WordPress Cross-Site Scripting Vulnerability (3.9 - 4.1.1) CVE-2015-3439
WordPress Cross-Site Scripting Vulnerability (3.9.3 - 4.2) CVE-2015-3440
WordPress Cryptographic Issues Vulnerability (CVE-2009-3622) CVE-2009-3622
WordPress Cryptographic Issues Vulnerability (CVE-2013-2173) CVE-2013-2173
WordPress Cryptographic Issues Vulnerability (CVE-2014-9037) CVE-2014-9037
WordPress CVE-2006-4028 Vulnerability (CVE-2006-4028) CVE-2006-4028
WordPress CVE-2008-6767 Vulnerability (CVE-2008-6767) CVE-2008-6767
WordPress CVE-2011-3122 Vulnerability (CVE-2011-3122) CVE-2011-3122
WordPress CVE-2011-3125 Vulnerability (CVE-2011-3125) CVE-2011-3125
WordPress CVE-2011-4899 Vulnerability (CVE-2011-4899) CVE-2011-4899
WordPress CVE-2012-0937 Vulnerability (CVE-2012-0937) CVE-2012-0937
WordPress CVE-2012-2399 Vulnerability (CVE-2012-2399) CVE-2012-2399
WordPress CVE-2012-2400 Vulnerability (CVE-2012-2400) CVE-2012-2400
WordPress CVE-2014-5203 Vulnerability (CVE-2014-5203) CVE-2014-5203
WordPress CVE-2016-5832 Vulnerability (CVE-2016-5832) CVE-2016-5832
WordPress CVE-2016-5836 Vulnerability (CVE-2016-5836) CVE-2016-5836
WordPress CVE-2016-5837 Vulnerability (CVE-2016-5837) CVE-2016-5837
WordPress CVE-2016-5839 Vulnerability (CVE-2016-5839) CVE-2016-5839
WordPress CVE-2017-1001000 Vulnerability (CVE-2017-1001000) CVE-2017-1001000
WordPress CVE-2019-17673 Vulnerability (CVE-2019-17673) CVE-2019-17673
WordPress CVE-2020-25286 Vulnerability (CVE-2020-25286) CVE-2020-25286
WordPress CVE-2020-28033 Vulnerability (CVE-2020-28033) CVE-2020-28033
WordPress CVE-2020-28039 Vulnerability (CVE-2020-28039) CVE-2020-28039
WordPress CVE-2023-5561 Vulnerability (CVE-2023-5561) CVE-2023-5561
WordPress CVE-2023-39999 Vulnerability (CVE-2023-39999) CVE-2023-39999
WordPress database credentials disclosure
WordPress Data Processing Errors Vulnerability (CVE-2014-9034) CVE-2014-9034
WordPress debug mode
WordPress default administrator account
WordPress Denial of Service Vulnerability (0.70 - 3.6.1) CVE-2018-6389