Vulnerability Name CVE Severity
WordPress Denial of Service Vulnerability (3.5 - 3.6.1)
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2018-19296)
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2018-20148)
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2020-28032)
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2020-36326)
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2022-21663)
WordPress Directory Traversal (3.7 - 5.0.3)
WordPress Direct Request ('Forced Browsing') Vulnerability (CVE-2005-1688)
WordPress Duplicator plugin Unauthenticated Arbitrary File Download
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-0191)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-0195)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-0701)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3126)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3128)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3818)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4898)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5868)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2202)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5730)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5835)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5487)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5610)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6514)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-20151)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-17671)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-29450)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-39200)
WordPress full path disclosure
WordPress Improper Access Control Vulnerability (CVE-2015-5623)
WordPress Improper Authentication Vulnerability (CVE-2008-1930)
WordPress Improper Authentication Vulnerability (CVE-2009-2334)
WordPress Improper Authentication Vulnerability (CVE-2014-0166)
WordPress Improper Authentication Vulnerability (CVE-2022-43504)
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2003-1599)
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2009-3890)
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-4338)
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-8942)
WordPress Improper Input Validation Vulnerability (CVE-2007-1277)
WordPress Improper Input Validation Vulnerability (CVE-2008-2392)
WordPress Improper Input Validation Vulnerability (CVE-2008-4106)
WordPress Improper Input Validation Vulnerability (CVE-2008-5695)
WordPress Improper Input Validation Vulnerability (CVE-2009-2431)
WordPress Improper Input Validation Vulnerability (CVE-2011-3127)
WordPress Improper Input Validation Vulnerability (CVE-2011-4957)
WordPress Improper Input Validation Vulnerability (CVE-2013-2204)
WordPress Improper Input Validation Vulnerability (CVE-2013-4339)
WordPress Improper Input Validation Vulnerability (CVE-2013-5738)
WordPress Improper Input Validation Vulnerability (CVE-2014-9038)
WordPress Improper Input Validation Vulnerability (CVE-2016-9263)
WordPress Improper Input Validation Vulnerability (CVE-2017-6815)
WordPress Improper Input Validation Vulnerability (CVE-2017-9065)
WordPress Improper Input Validation Vulnerability (CVE-2017-1000600)
WordPress Improper Input Validation Vulnerability (CVE-2018-20152)
WordPress Improper Input Validation Vulnerability (CVE-2018-1000773)
WordPress Improper Input Validation Vulnerability (CVE-2019-20041)
WordPress Improper Input Validation Vulnerability (CVE-2020-26596)
WordPress Improper Input Validation Vulnerability (CVE-2020-28037)
WordPress Improper Input Validation Vulnerability (CVE-2020-35539)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0194)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0196)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0615)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-4769)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-6896)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-7169)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14719)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14722)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-12895)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-8943)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-2745)
WordPress Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-6762)
WordPress Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2016-10033)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-1732)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-4139)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5105)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5106)