Vulnerability Name CVE Severity
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16222) CVE-2019-16222
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16223) CVE-2019-16223
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16780) CVE-2019-16780
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16781) CVE-2019-16781
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-17672) CVE-2019-17672
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-17674) CVE-2019-17674
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-20042) CVE-2019-20042
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4046) CVE-2020-4046
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11025) CVE-2020-11025
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11026) CVE-2020-11026
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11029) CVE-2020-11029
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11030) CVE-2020-11030
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-28034) CVE-2020-28034
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-28038) CVE-2020-28038
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-39201) CVE-2021-39201
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-4973) CVE-2022-4973
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-21662) CVE-2022-21662
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43497) CVE-2022-43497
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43500) CVE-2022-43500
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-38000) CVE-2023-38000
WordPress Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2020-4047) CVE-2020-4047
WordPress Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2020-4049) CVE-2020-4049
WordPress Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2016-10045) CVE-2016-10045
WordPress Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2008-4796) CVE-2008-4796
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-1897) CVE-2007-1897
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-4894) CVE-2007-4894
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-6318) CVE-2007-6318
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0491) CVE-2008-0491
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0616) CVE-2008-0616
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4625) CVE-2008-4625
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4257) CVE-2010-4257
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-3130) CVE-2011-3130
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-2213) CVE-2015-2213
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-5611) CVE-2017-5611
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-14723) CVE-2017-14723
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-16510) CVE-2017-16510
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-21661) CVE-2022-21661
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-21664) CVE-2022-21664
WordPress Improper Privilege Management Vulnerability (CVE-2019-20043) CVE-2019-20043
WordPress Improper Privilege Management Vulnerability (CVE-2020-28035) CVE-2020-28035
WordPress Improper Privilege Management Vulnerability (CVE-2020-28036) CVE-2020-28036
WordPress Improper Restriction of XML External Entity Reference Vulnerability (CVE-2021-29447) CVE-2021-29447
WordPress Inadequate Encryption Strength Vulnerability (CVE-2012-6707) CVE-2012-6707
WordPress Incorrect Authorization Vulnerability (CVE-2017-6816) CVE-2017-6816
WordPress Incorrect Authorization Vulnerability (CVE-2018-20147) CVE-2018-20147
WordPress Incorrect Default Permissions Vulnerability (CVE-2011-1762) CVE-2011-1762
WordPress Insecure Default Initialization of Resource Vulnerability (CVE-2017-5491) CVE-2017-5491
WordPress MailPoet Newsletters (wysija-newsletters) unauthenticated file upload
WordPress Missing Authentication for Critical Function Vulnerability (CVE-2020-11028) CVE-2020-11028
WordPress MU 'wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities (1.0 - 2.5.1) CVE-2008-4671
WordPress MU 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability (1.0 - 2.6) CVE-2009-1030
WordPress Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.2.1 - 1.2.2)
WordPress Multiple Cross-Site Scripting Vulnerabilities (1.2 - 1.2.1)
WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.0.1) CVE-2006-0985 CVE-2006-1796
WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0.11 - 2.3) CVE-2008-0193
WordPress Multiple Cross-Site Scripting Vulnerabilities (4.1 - 4.2.1) CVE-2015-3429 CVE-2015-8834
WordPress Multiple Vulnerabilities (0.70 - 3.6.1) CVE-2016-5832 CVE-2016-5833 CVE-2016-5834 CVE-2016-5835 CVE-2016-5836 CVE-2016-5837 CVE-2016-5838 CVE-2016-5839
WordPress OptimizePress unrestricted file upload CVE-2013-7102
WordPress Other Vulnerability (CVE-2004-1559) CVE-2004-1559
WordPress Other Vulnerability (CVE-2004-1584) CVE-2004-1584
WordPress Other Vulnerability (CVE-2005-1102) CVE-2005-1102
WordPress Other Vulnerability (CVE-2005-1687) CVE-2005-1687
WordPress Other Vulnerability (CVE-2005-1810) CVE-2005-1810
WordPress Other Vulnerability (CVE-2005-2107) CVE-2005-2107
WordPress Other Vulnerability (CVE-2005-2108) CVE-2005-2108
WordPress Other Vulnerability (CVE-2005-2109) CVE-2005-2109
WordPress Other Vulnerability (CVE-2005-2110) CVE-2005-2110
WordPress Other Vulnerability (CVE-2005-2612) CVE-2005-2612
WordPress Other Vulnerability (CVE-2005-4463) CVE-2005-4463
WordPress Other Vulnerability (CVE-2006-0733) CVE-2006-0733
WordPress Other Vulnerability (CVE-2006-0985) CVE-2006-0985
WordPress Other Vulnerability (CVE-2006-0986) CVE-2006-0986
WordPress Other Vulnerability (CVE-2006-1012) CVE-2006-1012
WordPress Other Vulnerability (CVE-2006-1263) CVE-2006-1263
WordPress Other Vulnerability (CVE-2006-1796) CVE-2006-1796