Vulnerability Name CVE Severity
WordPress Cross-Site Scripting Vulnerability (0.70 - 3.7.11)
WordPress Cross-Site Scripting Vulnerability (0.70 - 4.1.1)
WordPress Cross-Site Scripting Vulnerability (3.0 - 3.6.1)
WordPress Cross-Site Scripting Vulnerability (3.9 - 4.1.1)
WordPress Cross-Site Scripting Vulnerability (3.9.3 - 4.2)
WordPress CVE-2011-4899 Vulnerability (CVE-2011-4899)
WordPress CVE-2014-5203 Vulnerability (CVE-2014-5203)
WordPress CVE-2016-5832 Vulnerability (CVE-2016-5832)
WordPress CVE-2016-5836 Vulnerability (CVE-2016-5836)
WordPress CVE-2016-5837 Vulnerability (CVE-2016-5837)
WordPress CVE-2016-5839 Vulnerability (CVE-2016-5839)
WordPress CVE-2017-1001000 Vulnerability (CVE-2017-1001000)
WordPress CVE-2019-17673 Vulnerability (CVE-2019-17673)
WordPress CVE-2020-28033 Vulnerability (CVE-2020-28033)
WordPress debug mode
WordPress Denial of Service Vulnerability (0.70 - 3.6.1)
WordPress Denial of Service Vulnerability (3.5 - 3.6.1)
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2018-19296)
WordPress Deserialization of Untrusted Data Vulnerability (CVE-2022-21663)
WordPress Directory Traversal (3.7 - 5.0.3)
WordPress Duplicator plugin Unauthenticated Arbitrary File Download
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5835)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-20151)
WordPress Improper Authentication Vulnerability (CVE-2008-1930)
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2003-1599)
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-4338)
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-8942)
WordPress Improper Input Validation Vulnerability (CVE-2007-1277)
WordPress Improper Input Validation Vulnerability (CVE-2008-5695)
WordPress Improper Input Validation Vulnerability (CVE-2013-4339)
WordPress Improper Input Validation Vulnerability (CVE-2017-9065)
WordPress Improper Input Validation Vulnerability (CVE-2017-1000600)
WordPress Improper Input Validation Vulnerability (CVE-2018-1000773)
WordPress Improper Input Validation Vulnerability (CVE-2020-26596)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0194)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-6896)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14719)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14722)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-12895)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9062)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-4894)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0491)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4625)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-3130)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-2213)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-21661)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-21664)
WordPress Inadequate Encryption Strength Vulnerability (CVE-2012-6707)
WordPress MailPoet Newsletters (wysija-newsletters) unauthenticated file upload
WordPress Missing Authentication for Critical Function Vulnerability (CVE-2020-11028)
WordPress MU 'wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities (1.0 - 2.5.1)
WordPress MU 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability (1.0 - 2.6)
WordPress Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.2.1 - 1.2.2)
WordPress Multiple Cross-Site Scripting Vulnerabilities (1.2 - 1.2.1)
WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.0.1)
WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0.11 - 2.3)
WordPress Multiple Cross-Site Scripting Vulnerabilities (4.1 - 4.2.1)
WordPress Multiple Vulnerabilities (0.70 - 3.6.1)
WordPress OptimizePress unrestricted file upload
WordPress Other Vulnerability (CVE-2005-1687)
WordPress Other Vulnerability (CVE-2005-1810)
WordPress Other Vulnerability (CVE-2005-2108)
WordPress Other Vulnerability (CVE-2005-2612)
WordPress Other Vulnerability (CVE-2006-1012)
WordPress Other Vulnerability (CVE-2006-2667)
WordPress Other Vulnerability (CVE-2007-0233)
WordPress Other Vulnerability (CVE-2007-0262)
WordPress Other Vulnerability (CVE-2007-0539)
WordPress Other Vulnerability (CVE-2007-2821)
WordPress Other Vulnerability (CVE-2016-2221)
WordPress Other Vulnerability (CVE-2016-2222)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2146)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3747)
WordPress Pingback Source URI Denial of Service and Information Disclosure Vulnerabilities (0.6.2 - 2.1.3)
WordPress Plugin .htaccess Redirect Cross-Site Scripting (0.3.1)