Vulnerability Name CVE Severity
WordPress 6.0.x Shortcode Execution (6.0 - 6.0.4)
WordPress 6.1.x Cross-Site Scripting (6.1 - 6.1.5) CVE-2024-4439
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.1) CVE-2023-2745
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.3) CVE-2023-5561 CVE-2023-38000 CVE-2023-39999
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.4)
WordPress 6.1.x Multiple Vulnerabilities (6.1 - 6.1.6)
WordPress 6.1.x Shortcode Execution (6.1 - 6.1.2)
WordPress 6.2 Multiple Vulnerabilities (6.2) CVE-2023-2745
WordPress 6.2.x Cross-Site Scripting (6.2 - 6.2.4) CVE-2024-4439
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.2) CVE-2023-5561 CVE-2023-38000 CVE-2023-39999
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.3)
WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5)
WordPress 6.2.x Shortcode Execution (6.2 - 6.2.1)
WordPress 6.3.x Cross-Site Scripting (6.3 - 6.3.3) CVE-2024-4439
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.1) CVE-2023-5561 CVE-2023-38000 CVE-2023-39999
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.2)
WordPress 6.3.x Multiple Vulnerabilities (6.3 - 6.3.4)
WordPress 6.4.x Cross-Site Scripting (6.4 - 6.4.3) CVE-2024-4439
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.2)
WordPress 6.4.x Multiple Vulnerabilities (6.4 - 6.4.4)
WordPress 6.4.x Remote Code Execution (6.4 - 6.4.1)
WordPress 6.5 Cross-Site Scripting (6.5) CVE-2024-4439
WordPress 6.5.x Multiple Vulnerabilities (6.5 - 6.5.4)
WordPress 7PK - Security Features Vulnerability (CVE-2014-9039) CVE-2014-9039
WordPress 7PK - Security Features Vulnerability (CVE-2016-10148) CVE-2016-10148
WordPress Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2019-17675) CVE-2019-17675
WordPress admin accessible without HTTP authentication
WordPress allows editing theme/plugin files
WordPress Anti-CSRF Token Security Bypass Weakness (3.3.1) CVE-2012-1936
WordPress Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2020-4050) CVE-2020-4050
WordPress caching plugins PHP code execution CVE-2013-2010
WordPress Cleartext Storage of Sensitive Information Vulnerability (CVE-2017-14990) CVE-2017-14990
WordPress Clickjacking Vulnerability (0.7 - 3.1.2) CVE-2011-3127
WordPress Comment Post Cross-Site Scripting Vulnerability (2.0) CVE-2006-0733
WordPress configuration file weak file permissions
WordPress Configuration Vulnerability (CVE-2009-2335) CVE-2009-2335
WordPress Configuration Vulnerability (CVE-2009-2336) CVE-2009-2336
WordPress Configuration Vulnerability (CVE-2013-2205) CVE-2013-2205
WordPress Cookie Data PHP Code Injection Vulnerability (1.5 - 1.5.1.3) CVE-2005-2612
WordPress Cookies Security Bypass Weakness (1.5 - 2.3.1) CVE-2007-6013
WordPress Credentials Management Errors Vulnerability (CVE-2009-2762) CVE-2009-2762
WordPress Credentials Management Errors Vulnerability (CVE-2016-5838) CVE-2016-5838
WordPress Cross-Domain Flash Injection Vulnerability (0.70 - 3.6.1) CVE-2016-9263 CVE-2018-5776
WordPress Cross-Site Request Forgery (0.70 - 3.6.1) CVE-2019-9787
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2007-4893) CVE-2007-4893
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0198) CVE-2008-0198
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-5113) CVE-2008-5113
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-1936) CVE-2012-1936
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-3384) CVE-2012-3384
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-4448) CVE-2012-4448
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-7233) CVE-2013-7233
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-5204) CVE-2014-5204
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-5205) CVE-2014-5205
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9033) CVE-2014-9033
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5731) CVE-2015-5731
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6635) CVE-2016-6635
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6897) CVE-2016-6897
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5489) CVE-2017-5489
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-5492) CVE-2017-5492
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-6819) CVE-2017-6819
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-9064) CVE-2017-9064
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-9787) CVE-2019-9787
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-28040) CVE-2020-28040
WordPress Cross-Site Scripting Vulnerability (0.70 - 3.7.11) CVE-2016-1564
WordPress Cross-Site Scripting Vulnerability (0.70 - 4.1.1) CVE-2015-3438
WordPress Cross-Site Scripting Vulnerability (3.0 - 3.6.1) CVE-2014-9031
WordPress Cross-Site Scripting Vulnerability (3.9 - 4.1.1) CVE-2015-3439
WordPress Cross-Site Scripting Vulnerability (3.9.3 - 4.2) CVE-2015-3440
WordPress Cryptographic Issues Vulnerability (CVE-2009-3622) CVE-2009-3622
WordPress Cryptographic Issues Vulnerability (CVE-2013-2173) CVE-2013-2173
WordPress Cryptographic Issues Vulnerability (CVE-2014-9037) CVE-2014-9037
WordPress CVE-2006-4028 Vulnerability (CVE-2006-4028) CVE-2006-4028
WordPress CVE-2008-6767 Vulnerability (CVE-2008-6767) CVE-2008-6767
WordPress CVE-2011-3122 Vulnerability (CVE-2011-3122) CVE-2011-3122
WordPress CVE-2011-3125 Vulnerability (CVE-2011-3125) CVE-2011-3125