Vulnerability Name CVE Severity
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-8942)
WordPress Improper Input Validation Vulnerability (CVE-2007-1277)
WordPress Improper Input Validation Vulnerability (CVE-2008-5695)
WordPress Improper Input Validation Vulnerability (CVE-2013-4339)
WordPress Improper Input Validation Vulnerability (CVE-2017-9065)
WordPress Improper Input Validation Vulnerability (CVE-2017-1000600)
WordPress Improper Input Validation Vulnerability (CVE-2018-1000773)
WordPress Improper Input Validation Vulnerability (CVE-2020-26596)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0194)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-6896)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14719)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-14722)
WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-12895)
WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9062)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2007-4894)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-0491)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4625)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-3130)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-2213)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-21661)
WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-21664)
WordPress Inadequate Encryption Strength Vulnerability (CVE-2012-6707)
WordPress MailPoet Newsletters (wysija-newsletters) unauthenticated file upload
WordPress migration backup publicly accessible
WordPress Missing Authentication for Critical Function Vulnerability (CVE-2020-11028)
WordPress MU 'wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities (1.0 - 2.5.1)
WordPress MU 'wp-includes/wpmu-functions.php' Cross-Site Scripting Vulnerability (1.0 - 2.6)
WordPress Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (1.2.1 - 1.2.2)
WordPress Multiple Cross-Site Scripting Vulnerabilities (1.2 - 1.2.1)
WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0 - 2.0.1)
WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0.11 - 2.3)
WordPress Multiple Cross-Site Scripting Vulnerabilities (4.1 - 4.2.1)
WordPress Multiple Vulnerabilities (0.70 - 3.6.1)
WordPress OptimizePress unrestricted file upload
WordPress Other Vulnerability (CVE-2005-1687)
WordPress Other Vulnerability (CVE-2005-1810)
WordPress Other Vulnerability (CVE-2005-2108)
WordPress Other Vulnerability (CVE-2005-2612)
WordPress Other Vulnerability (CVE-2006-1012)
WordPress Other Vulnerability (CVE-2006-2667)
WordPress Other Vulnerability (CVE-2007-0233)
WordPress Other Vulnerability (CVE-2007-0262)
WordPress Other Vulnerability (CVE-2007-0539)
WordPress Other Vulnerability (CVE-2007-2821)
WordPress Other Vulnerability (CVE-2016-2221)
WordPress Other Vulnerability (CVE-2016-2222)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2146)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3747)
WordPress Pingback Source URI Denial of Service and Information Disclosure Vulnerabilities (0.6.2 - 2.1.3)
WordPress Plugin .htaccess Redirect Cross-Site Scripting (0.3.1)
WordPress Plugin 0mk Shortener Cross-Site Request Forgery (0.2)
WordPress Plugin 1 Flash Gallery 'upload.php' Arbitrary File Upload (1.5.7)
WordPress Plugin 1 Flash Gallery Cross-Site Scripting and SQL Injection Vulnerabilities (0.2.5)
WordPress Plugin 1-click Retweet/Share/Like Cross-Site Scripting (5.2)
WordPress Plugin 1player Cross-Site Scripting (1.3)
WordPress Plugin 2 Click Social Media Buttons 'xing-url' Parameter Cross-Site Scripting (0.32.2)
WordPress Plugin 2kb Amazon Affiliates Store Cross-Site Scripting (2.1.0)
WordPress Plugin 2Way VideoCalls and Random Chat-HTML5 Webcam Videochat Cross-Site Scripting (4.41)
WordPress Plugin 2Way VideoCalls and Random Chat-HTML5 Webcam Videochat Cross-Site Scripting (5.2.7)
WordPress Plugin 3dady real-time web stats Cross-Site Request Forgery (1.0)
WordPress Plugin 3D Banner Rotator 'upload.php' Arbitrary File Upload (2.1)
WordPress Plugin 3D Cover Carousel Cross-Site Scripting (1.0)
WordPress Plugin 3D Flick Slideshow 'upload.php' Arbitrary File Upload (2.1)
WordPress Plugin 3DPrint Cross-Site Request Forgery (3.5.4.7)
WordPress Plugin 3DPrint Lite Arbitrary File Upload (1.9.1.4)
WordPress Plugin 3DPrint Lite Cross-Site Scripting (1.9.1.5)
WordPress Plugin 3D Product configurator for WooCommerce Arbitrary File Upload (1.5.531)
WordPress Plugin 3D Slider Slice Box Multiple Cross-Site Scripting Vulnerabilities (1.0)
WordPress Plugin 3D Tag Cloud Cross-Site Request Forgery (3.8)
WordPress Plugin 3xSocializer Cross-Site Scripting (0.98.22)
WordPress Plugin 4k Icons for Visual Composer-Free Cross-Site Scripting (1.0)
WordPress Plugin 5gig Concerts Unspecified Vulnerability (1.0)
WordPress Plugin 10Web AI Assistant-AI content writing assistant Security Bypass (1.0.18)
WordPress Plugin 10WebAnalytics Cross-Site Request Forgery (1.2.8)
WordPress Plugin 10Web Map Builder for Google Maps Cross-Site Scripting (1.0.69)